Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    dc82cf0d5bd25f8d14a8f6ef30dd79db_JaffaCakes118

  • Size

    400KB

  • Sample

    240912-styq4a1fkm

  • MD5

    dc82cf0d5bd25f8d14a8f6ef30dd79db

  • SHA1

    cba74644b34a4a5f8b463928ce32dcff62597fde

  • SHA256

    7db04d6dc6eb841696b197963efc172772888f60ae8938d3c83b5363e1dcf707

  • SHA512

    9d8b40316b036c844a4be490e9898a86edd003a3efd6f926a6ac15b72c535347a5ef5d04238506b190084cdbbe23728f5977f844672882bd517a9228bb58a0c7

  • SSDEEP

    12288:8jkArEN249AyE/rbaMct4bO2/r+QWS3YVctS9:vFE//Tct4bOsWVKS9

Score
8/10

Malware Config

Targets

    • Target

      dc82cf0d5bd25f8d14a8f6ef30dd79db_JaffaCakes118

    • Size

      400KB

    • MD5

      dc82cf0d5bd25f8d14a8f6ef30dd79db

    • SHA1

      cba74644b34a4a5f8b463928ce32dcff62597fde

    • SHA256

      7db04d6dc6eb841696b197963efc172772888f60ae8938d3c83b5363e1dcf707

    • SHA512

      9d8b40316b036c844a4be490e9898a86edd003a3efd6f926a6ac15b72c535347a5ef5d04238506b190084cdbbe23728f5977f844672882bd517a9228bb58a0c7

    • SSDEEP

      12288:8jkArEN249AyE/rbaMct4bO2/r+QWS3YVctS9:vFE//Tct4bOsWVKS9

    Score
    8/10
    • Drops file in Drivers directory

    • Deletes itself

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks