Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e1bc4df908c392463861a686e5db019c_JaffaCakes118

  • Size

    4.9MB

  • Sample

    240915-fglvjswhmm

  • MD5

    e1bc4df908c392463861a686e5db019c

  • SHA1

    a351be6e655a6c85ce78e88f8572175359781a38

  • SHA256

    bdb3f4c8b20a6dee771612bd555a1e7aeaf824cb3befb7dd73c7d423789088e6

  • SHA512

    21a7895ee8d7a70ac70bc58d53808d3b51299ebca58bb8d6450c20362a869d9b521d31e1108469ddb38c06e7de890f056d1264c02ccf5c786440257de502d657

  • SSDEEP

    98304:+ytLuESrJkyTl9KMkEfj9gMWRW1xpF27ZOidJf9a52DLsz8RG3slJu+NEO0:+zrJR9/JgtWjpF2VtdJ852BceTNv0

Malware Config

Targets

    • Target

      e1bc4df908c392463861a686e5db019c_JaffaCakes118

    • Size

      4.9MB

    • MD5

      e1bc4df908c392463861a686e5db019c

    • SHA1

      a351be6e655a6c85ce78e88f8572175359781a38

    • SHA256

      bdb3f4c8b20a6dee771612bd555a1e7aeaf824cb3befb7dd73c7d423789088e6

    • SHA512

      21a7895ee8d7a70ac70bc58d53808d3b51299ebca58bb8d6450c20362a869d9b521d31e1108469ddb38c06e7de890f056d1264c02ccf5c786440257de502d657

    • SSDEEP

      98304:+ytLuESrJkyTl9KMkEfj9gMWRW1xpF27ZOidJf9a52DLsz8RG3slJu+NEO0:+zrJR9/JgtWjpF2VtdJ852BceTNv0

    • Stops running service(s)

    • Uses Session Manager for persistence

      Creates Session Manager registry key to run executable early in system boot.

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks