Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d727ddb21ba2a754ebfcd64053796ac6_JaffaCakes118

  • Size

    145KB

  • Sample

    240909-1shbqasckp

  • MD5

    d727ddb21ba2a754ebfcd64053796ac6

  • SHA1

    03f11470d827e11d0c1f3ac25f848282264b504d

  • SHA256

    d772410f097f525acf0bc6b6d2008539ab4fe27bcc76200dc20b01219938544c

  • SHA512

    1077cca7510aee9f07a9d09e048b8941cee231bf79826e12297d29c18454fc8ca17d47a8cc8f8e150560854b495bec204b90467c1b71210a4f4ccbac92415d9e

  • SSDEEP

    3072:GIbejFUgrPc3pvbnzs27KMHwTpRCopnvvNQwin6/T6VtE6nD:7bwUgrk3BaMQTnBnvvy8T6VtXD

Malware Config

Targets

    • Target

      d727ddb21ba2a754ebfcd64053796ac6_JaffaCakes118

    • Size

      145KB

    • MD5

      d727ddb21ba2a754ebfcd64053796ac6

    • SHA1

      03f11470d827e11d0c1f3ac25f848282264b504d

    • SHA256

      d772410f097f525acf0bc6b6d2008539ab4fe27bcc76200dc20b01219938544c

    • SHA512

      1077cca7510aee9f07a9d09e048b8941cee231bf79826e12297d29c18454fc8ca17d47a8cc8f8e150560854b495bec204b90467c1b71210a4f4ccbac92415d9e

    • SSDEEP

      3072:GIbejFUgrPc3pvbnzs27KMHwTpRCopnvvNQwin6/T6VtE6nD:7bwUgrk3BaMQTnBnvvy8T6VtXD

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks