Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    dc697759329abaaf6a6dc6acf57e7124_JaffaCakes118

  • Size

    377KB

  • Sample

    240912-rqrmyayejd

  • MD5

    dc697759329abaaf6a6dc6acf57e7124

  • SHA1

    034128d9159f6484c18f2497d700b4ddeb95ddf1

  • SHA256

    20069e8530e9643a75fe1a6ab6919aca3a55da640156dbbad559078ece27634c

  • SHA512

    2ad9c2bee80c8febad665cdfb1288a37e3176c13c8af9ab00db3cba04d45964ad483798db3a02ec24065eb0d9c7694bc43a1fc9371ba972138a341d19a16e1af

  • SSDEEP

    6144:8B8lev8CcOsW1D8fBUkEv8a6dRPMfbt4xb7s5evZ08zj6:8mlevXfsgofykHREfbSbfvZY

Malware Config

Targets

    • Target

      dc697759329abaaf6a6dc6acf57e7124_JaffaCakes118

    • Size

      377KB

    • MD5

      dc697759329abaaf6a6dc6acf57e7124

    • SHA1

      034128d9159f6484c18f2497d700b4ddeb95ddf1

    • SHA256

      20069e8530e9643a75fe1a6ab6919aca3a55da640156dbbad559078ece27634c

    • SHA512

      2ad9c2bee80c8febad665cdfb1288a37e3176c13c8af9ab00db3cba04d45964ad483798db3a02ec24065eb0d9c7694bc43a1fc9371ba972138a341d19a16e1af

    • SSDEEP

      6144:8B8lev8CcOsW1D8fBUkEv8a6dRPMfbt4xb7s5evZ08zj6:8mlevXfsgofykHREfbSbfvZY

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks