Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d991c537d32542b2b2831f6fce149dc0_JaffaCakes118

  • Size

    415KB

  • Sample

    240911-ejrm5s1flp

  • MD5

    d991c537d32542b2b2831f6fce149dc0

  • SHA1

    4b30dc2b38561851ac9047052e890f19f2fea29a

  • SHA256

    23d513e3e3b43a2da0289daa421314546a27b998c54a2ccff888b7a1e11c9a00

  • SHA512

    e7ab1ea30db2c2234bd78d4b5db5f7fe67a406c7b5a31e8150af652cfddfbb6586fda8808ec447857e51354eaee9352ca7034b8bcc387b6d542d7f0ff5114911

  • SSDEEP

    12288:tZ6TIoft2yugll2jnAaeX6mXM3W4/Plf:tZ6glQlCn0X6X3WoNf

Malware Config

Targets

    • Target

      d991c537d32542b2b2831f6fce149dc0_JaffaCakes118

    • Size

      415KB

    • MD5

      d991c537d32542b2b2831f6fce149dc0

    • SHA1

      4b30dc2b38561851ac9047052e890f19f2fea29a

    • SHA256

      23d513e3e3b43a2da0289daa421314546a27b998c54a2ccff888b7a1e11c9a00

    • SHA512

      e7ab1ea30db2c2234bd78d4b5db5f7fe67a406c7b5a31e8150af652cfddfbb6586fda8808ec447857e51354eaee9352ca7034b8bcc387b6d542d7f0ff5114911

    • SSDEEP

      12288:tZ6TIoft2yugll2jnAaeX6mXM3W4/Plf:tZ6glQlCn0X6X3WoNf

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks