Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d2c6fe3890f8e938d69ea3b16dac8c98_JaffaCakes118

  • Size

    793KB

  • Sample

    240907-y922cawcma

  • MD5

    d2c6fe3890f8e938d69ea3b16dac8c98

  • SHA1

    7e0e6affcb901bc84601bcc98997e81b665a05b1

  • SHA256

    6a89bc9bd61e5f12dab512dac41980a169ffda460d90c37e922f1bf7faac79f5

  • SHA512

    ff98653527193cb5d4de15409f3ecb2b26e1b73d7f5352bd6d58a300cc073255b57e32fab15aac2f7665b6ec16a47e02d9342fbfd555e9d5742b1b59f24b4a13

  • SSDEEP

    12288:4n++6BeejzuzRqCysYNsaNboV7YSrLKH5j65ZW+d7bZJl/LQKIu5FhI7kd:4IP3u8N6V7Yz6I+5bdL3AAd

Malware Config

Targets

    • Target

      d2c6fe3890f8e938d69ea3b16dac8c98_JaffaCakes118

    • Size

      793KB

    • MD5

      d2c6fe3890f8e938d69ea3b16dac8c98

    • SHA1

      7e0e6affcb901bc84601bcc98997e81b665a05b1

    • SHA256

      6a89bc9bd61e5f12dab512dac41980a169ffda460d90c37e922f1bf7faac79f5

    • SHA512

      ff98653527193cb5d4de15409f3ecb2b26e1b73d7f5352bd6d58a300cc073255b57e32fab15aac2f7665b6ec16a47e02d9342fbfd555e9d5742b1b59f24b4a13

    • SSDEEP

      12288:4n++6BeejzuzRqCysYNsaNboV7YSrLKH5j65ZW+d7bZJl/LQKIu5FhI7kd:4IP3u8N6V7Yz6I+5bdL3AAd

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks