Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e16d51f6c2814e37091257c4bb27ac32_JaffaCakes118

  • Size

    464KB

  • Sample

    240915-br4e5ayarn

  • MD5

    e16d51f6c2814e37091257c4bb27ac32

  • SHA1

    3c120c2c949d7f89bdd48b687bee02ce862066f5

  • SHA256

    9f013dcfb838b5d3175eabcf715577fec25685d0e62b6867e142ef455bd3823f

  • SHA512

    e720027ed063df5461b0ca025cad97efaa73b6b985420b1e693c4461b15084fb63aadda4bdab2000f83254b262e2aa6bdd032ba6d31e10bf2945eb09421feda8

  • SSDEEP

    6144:jv9C/yNR8qChqzXau3l7rqyUtYutStdaJh8opa1Ap6pNTcr8ppFg5PChCjSQlLS4:jvPcbu13qyUtnOda8okyoNvfg5PEUV

Malware Config

Extracted

Family

gozi

Targets

    • Target

      e16d51f6c2814e37091257c4bb27ac32_JaffaCakes118

    • Size

      464KB

    • MD5

      e16d51f6c2814e37091257c4bb27ac32

    • SHA1

      3c120c2c949d7f89bdd48b687bee02ce862066f5

    • SHA256

      9f013dcfb838b5d3175eabcf715577fec25685d0e62b6867e142ef455bd3823f

    • SHA512

      e720027ed063df5461b0ca025cad97efaa73b6b985420b1e693c4461b15084fb63aadda4bdab2000f83254b262e2aa6bdd032ba6d31e10bf2945eb09421feda8

    • SSDEEP

      6144:jv9C/yNR8qChqzXau3l7rqyUtYutStdaJh8opa1Ap6pNTcr8ppFg5PChCjSQlLS4:jvPcbu13qyUtnOda8okyoNvfg5PEUV

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

MITRE ATT&CK Enterprise v15

Tasks