Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    de2a6184a7c1e5b982cb11ad40d487a1_JaffaCakes118

  • Size

    53KB

  • Sample

    240913-lv1hrawhlp

  • MD5

    de2a6184a7c1e5b982cb11ad40d487a1

  • SHA1

    bc686b76e1da7186899bd59a2c84587ce589de41

  • SHA256

    dce553abe2476cf7371e12928fa06cbecac62c17b32f889d6dc5d9cea722537d

  • SHA512

    4df9f9cf7b3adbd96f73a4d07a573d4731cfbe6ee004fd2372c9bddfdfeb48ada67107921590c10cd58dc304e89e14bd6fc4ceddd1492b0ede21287be2f280c8

  • SSDEEP

    768:1EVNXng1ioXbxBnqyHnWpc0QyLGjeURRJ7E1qod0VDb4xUFy3OYcFOkqIqMZ:1AQlbxBnNHnv0QvRJAZaF4+8Or5Z

Malware Config

Targets

    • Target

      de2a6184a7c1e5b982cb11ad40d487a1_JaffaCakes118

    • Size

      53KB

    • MD5

      de2a6184a7c1e5b982cb11ad40d487a1

    • SHA1

      bc686b76e1da7186899bd59a2c84587ce589de41

    • SHA256

      dce553abe2476cf7371e12928fa06cbecac62c17b32f889d6dc5d9cea722537d

    • SHA512

      4df9f9cf7b3adbd96f73a4d07a573d4731cfbe6ee004fd2372c9bddfdfeb48ada67107921590c10cd58dc304e89e14bd6fc4ceddd1492b0ede21287be2f280c8

    • SSDEEP

      768:1EVNXng1ioXbxBnqyHnWpc0QyLGjeURRJ7E1qod0VDb4xUFy3OYcFOkqIqMZ:1AQlbxBnNHnv0QvRJAZaF4+8Or5Z

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks