Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d5909c72e8b8e44ffb6d490a5e0b6d9c_JaffaCakes118

  • Size

    870KB

  • Sample

    240909-dp4n8a1fnd

  • MD5

    d5909c72e8b8e44ffb6d490a5e0b6d9c

  • SHA1

    39d63c0f4dc48a5cd12f27da8c551adabc6f5cfa

  • SHA256

    cb353ec2f0152780ed8cc68d0ddbbba1ffb14bf281f0e4dd6773e57d54487559

  • SHA512

    d5fe949a99daa1e0feb3de476a79bf5a32feff4cae21009842ff5a949986cf2732827abda507be36d2fb7722a808fb2de32c7cffb39674adff9355a5a62aae53

  • SSDEEP

    12288:qRFoQmXGnfb9rbpRQss0DaEufyDCMOU6n9T8fnJnk2uc6zqhJsgII1mkE3WDxR4k:qHfPOwWBfyDCzU6wrunaJs1pywtKnCm

Malware Config

Targets

    • Target

      d5909c72e8b8e44ffb6d490a5e0b6d9c_JaffaCakes118

    • Size

      870KB

    • MD5

      d5909c72e8b8e44ffb6d490a5e0b6d9c

    • SHA1

      39d63c0f4dc48a5cd12f27da8c551adabc6f5cfa

    • SHA256

      cb353ec2f0152780ed8cc68d0ddbbba1ffb14bf281f0e4dd6773e57d54487559

    • SHA512

      d5fe949a99daa1e0feb3de476a79bf5a32feff4cae21009842ff5a949986cf2732827abda507be36d2fb7722a808fb2de32c7cffb39674adff9355a5a62aae53

    • SSDEEP

      12288:qRFoQmXGnfb9rbpRQss0DaEufyDCMOU6n9T8fnJnk2uc6zqhJsgII1mkE3WDxR4k:qHfPOwWBfyDCzU6wrunaJs1pywtKnCm

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks