Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e1cd9b6139c606264db62a2570d7d163_JaffaCakes118

  • Size

    79KB

  • Sample

    240915-ga3edsycjn

  • MD5

    e1cd9b6139c606264db62a2570d7d163

  • SHA1

    3acb5dbb2e03d0b302b58b09a0d3cde77d5bf8ff

  • SHA256

    ef7d43ada28a3ce27c5a88bfc93282f83179f4d8fe3732824696eec9a9de1c39

  • SHA512

    098c9f0a24c1aa93533f9b040aebf8aaf7fe9e1828afe50eb9dccf2afb3b3866c633a8471fcd5543d40ed7777fa47653e46e3199a260760659594d6c11e6af11

  • SSDEEP

    1536:GQuTga8X62MTaUMMnMMMMMQqvuOYQIYQD7eRxA3PtYqcb+sCcNyOa+Mys9H1TDr:FukHFUMMnMMMMMX7I7D7eRa3FYqcbf5U

Malware Config

Targets

    • Target

      e1cd9b6139c606264db62a2570d7d163_JaffaCakes118

    • Size

      79KB

    • MD5

      e1cd9b6139c606264db62a2570d7d163

    • SHA1

      3acb5dbb2e03d0b302b58b09a0d3cde77d5bf8ff

    • SHA256

      ef7d43ada28a3ce27c5a88bfc93282f83179f4d8fe3732824696eec9a9de1c39

    • SHA512

      098c9f0a24c1aa93533f9b040aebf8aaf7fe9e1828afe50eb9dccf2afb3b3866c633a8471fcd5543d40ed7777fa47653e46e3199a260760659594d6c11e6af11

    • SSDEEP

      1536:GQuTga8X62MTaUMMnMMMMMQqvuOYQIYQD7eRxA3PtYqcb+sCcNyOa+Mys9H1TDr:FukHFUMMnMMMMMX7I7D7eRa3FYqcbf5U

    • Disables Task Manager via registry modification

    • Event Triggered Execution: AppCert DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppCert DLLs loaded into processes.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks