Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d9d8eac20ee056aef299b2ff04fb5bc1_JaffaCakes118

  • Size

    110KB

  • Sample

    240911-hzkfjsyhje

  • MD5

    d9d8eac20ee056aef299b2ff04fb5bc1

  • SHA1

    7b9d3654e348f6064f6233cc297203c897ca581b

  • SHA256

    899fd9291112a2dad595f7fd749b7de5027da5cf1c9bb05e9ea90796d1207d44

  • SHA512

    21da9f37af663f04fe5c2bd9e4712b437bfabafa00f8d35e3755921e49a0c8ff7b12b5620eb96f0c1eb4bfc4b56ec99ef84723ec15ba04198a9d83b63a38f274

  • SSDEEP

    1536:awSGenMXapWhZ1a8tPRDWAqEaPQ2AEbd4UFtTPL6PRWpvn8rJi8ZylQF:axMXapWhe8tZDWxRzA4/HArvIQF

Malware Config

Targets

    • Target

      d9d8eac20ee056aef299b2ff04fb5bc1_JaffaCakes118

    • Size

      110KB

    • MD5

      d9d8eac20ee056aef299b2ff04fb5bc1

    • SHA1

      7b9d3654e348f6064f6233cc297203c897ca581b

    • SHA256

      899fd9291112a2dad595f7fd749b7de5027da5cf1c9bb05e9ea90796d1207d44

    • SHA512

      21da9f37af663f04fe5c2bd9e4712b437bfabafa00f8d35e3755921e49a0c8ff7b12b5620eb96f0c1eb4bfc4b56ec99ef84723ec15ba04198a9d83b63a38f274

    • SSDEEP

      1536:awSGenMXapWhZ1a8tPRDWAqEaPQ2AEbd4UFtTPL6PRWpvn8rJi8ZylQF:axMXapWhe8tZDWxRzA4/HArvIQF

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks