Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    df95d06dbf91f247107d7f4906534832_JaffaCakes118

  • Size

    313KB

  • Sample

    240914-f9dpmsyhrc

  • MD5

    df95d06dbf91f247107d7f4906534832

  • SHA1

    8ef1279cbb06a94d2ee5f7455018124f1322d633

  • SHA256

    ccb0b03ff1e3fbf08af1e65a2ffa7ee2705143bd4180abf0fa61e45972fb993d

  • SHA512

    97c500d0755dd94785b760232644168e0e3911c5ee4ff9f2a6307bb14f2544b86526b3bec7c0ab4be4bfb75bd1947a08117a06673adaadb9a2a8912c1514f96c

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sqkKxWX34SpEUOO4JlbqC5Il:91OgLdaP6X5paJ1el

Malware Config

Targets

    • Target

      df95d06dbf91f247107d7f4906534832_JaffaCakes118

    • Size

      313KB

    • MD5

      df95d06dbf91f247107d7f4906534832

    • SHA1

      8ef1279cbb06a94d2ee5f7455018124f1322d633

    • SHA256

      ccb0b03ff1e3fbf08af1e65a2ffa7ee2705143bd4180abf0fa61e45972fb993d

    • SHA512

      97c500d0755dd94785b760232644168e0e3911c5ee4ff9f2a6307bb14f2544b86526b3bec7c0ab4be4bfb75bd1947a08117a06673adaadb9a2a8912c1514f96c

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sqkKxWX34SpEUOO4JlbqC5Il:91OgLdaP6X5paJ1el

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks