Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d35ebb32f342b99664e2a94d6399f739_JaffaCakes118

  • Size

    36KB

  • Sample

    240908-demyqa1eqk

  • MD5

    d35ebb32f342b99664e2a94d6399f739

  • SHA1

    cc8991de00f7b23c6ad71510efe607cc105a3473

  • SHA256

    fecfc56933af7f7d5d0c9083988d3c4debb494fee3bfbd69618a113985e32334

  • SHA512

    ce99a9f19e47aec40c6679b05cebd9ce9ad4fde1f98a3c248ce7b5d996e9b4d1c54b957d70589526b163a87dc9b0f8eb281c9d4e94efd0e459e0094d7ae5c467

  • SSDEEP

    768:QATJxFQM1+Bw8JrV4UYW50z4C6AXTzM7WyjiTn:QA3cBw8JrydM7W77

Score
7/10

Malware Config

Targets

    • Target

      d35ebb32f342b99664e2a94d6399f739_JaffaCakes118

    • Size

      36KB

    • MD5

      d35ebb32f342b99664e2a94d6399f739

    • SHA1

      cc8991de00f7b23c6ad71510efe607cc105a3473

    • SHA256

      fecfc56933af7f7d5d0c9083988d3c4debb494fee3bfbd69618a113985e32334

    • SHA512

      ce99a9f19e47aec40c6679b05cebd9ce9ad4fde1f98a3c248ce7b5d996e9b4d1c54b957d70589526b163a87dc9b0f8eb281c9d4e94efd0e459e0094d7ae5c467

    • SSDEEP

      768:QATJxFQM1+Bw8JrV4UYW50z4C6AXTzM7WyjiTn:QA3cBw8JrydM7W77

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks