Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e077db6a52170b764f13396e01355eea_JaffaCakes118

  • Size

    125KB

  • Sample

    240914-ssm8za1eqa

  • MD5

    e077db6a52170b764f13396e01355eea

  • SHA1

    767f6f2166e784896769c2d5d4deb8275d432258

  • SHA256

    63056125548f6ed378fd5ec7af0200dac3afc66502e9afb85b745082ab801cd3

  • SHA512

    1fc1277a1e926f181c4c4a3dbbf5f04a721a820bd4ccb4d659f5176d4c5b62c35fd8a208960b474c25f81752888f72e8828ce0ace84edf3e5df8f940f50b070b

  • SSDEEP

    3072:KDGx1ZqGwbk3qeTkzRs+sxxYqfVGgWUXxrymZO9wYL8KpYUfJ:KGxTqL4qeg912V9ZgwAXf

Malware Config

Targets

    • Target

      e077db6a52170b764f13396e01355eea_JaffaCakes118

    • Size

      125KB

    • MD5

      e077db6a52170b764f13396e01355eea

    • SHA1

      767f6f2166e784896769c2d5d4deb8275d432258

    • SHA256

      63056125548f6ed378fd5ec7af0200dac3afc66502e9afb85b745082ab801cd3

    • SHA512

      1fc1277a1e926f181c4c4a3dbbf5f04a721a820bd4ccb4d659f5176d4c5b62c35fd8a208960b474c25f81752888f72e8828ce0ace84edf3e5df8f940f50b070b

    • SSDEEP

      3072:KDGx1ZqGwbk3qeTkzRs+sxxYqfVGgWUXxrymZO9wYL8KpYUfJ:KGxTqL4qeg912V9ZgwAXf

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks