Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    df5ad86ef678f16fd543cb24bb8c7568_JaffaCakes118

  • Size

    356KB

  • Sample

    240914-db6lnatajn

  • MD5

    df5ad86ef678f16fd543cb24bb8c7568

  • SHA1

    f86ca3a8418dfee2cfc89982191f22f5516e698b

  • SHA256

    1b239168451ad131e4f7409fdf14e5d8ca050061702efe92c22059d0e8622154

  • SHA512

    f142ec1010efa1c814c8fe52b3138eb729c0f2fb656ad2b24f4abe24d72e4bf6c1eeba4b607fd117e280a1a1dc4ff5e3e155440371736612213dec9d58b21888

  • SSDEEP

    6144:7vbx8uzNZVz95q+Em3CwSJ96bd4cPItdHIsx2xPEeGcSUaV:7dzpqBNJ0bd4aI3IQuPFGcSUa

Malware Config

Targets

    • Target

      df5ad86ef678f16fd543cb24bb8c7568_JaffaCakes118

    • Size

      356KB

    • MD5

      df5ad86ef678f16fd543cb24bb8c7568

    • SHA1

      f86ca3a8418dfee2cfc89982191f22f5516e698b

    • SHA256

      1b239168451ad131e4f7409fdf14e5d8ca050061702efe92c22059d0e8622154

    • SHA512

      f142ec1010efa1c814c8fe52b3138eb729c0f2fb656ad2b24f4abe24d72e4bf6c1eeba4b607fd117e280a1a1dc4ff5e3e155440371736612213dec9d58b21888

    • SSDEEP

      6144:7vbx8uzNZVz95q+Em3CwSJ96bd4cPItdHIsx2xPEeGcSUaV:7dzpqBNJ0bd4aI3IQuPFGcSUa

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks