Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e1f69ae52fdedd722a87b6fe1927d94f_JaffaCakes118

  • Size

    117KB

  • Sample

    240915-h4bn7s1hnd

  • MD5

    e1f69ae52fdedd722a87b6fe1927d94f

  • SHA1

    bbf44dd7bf70e4872432bc82cb6cfac7de5d2aab

  • SHA256

    ddbb885db8467bbe75576bcbec3ac4081c73bea0bd08ea9197ad86db48639810

  • SHA512

    529be3abbb54be09b5b8f552aa0dad12e5fbc195d2a4ff43a8a4c22f531145dcdeee7b5fa7c8d971fbf29a40a6341ca3903bf4f81263cc6d26e9f7f7a1683df2

  • SSDEEP

    3072:0SXMaP2UgekLXP74WLV2c63O2jTwJIGKzD3kp:PcA2UPkLEIO3ZvwYP3A

Malware Config

Extracted

Family

gozi

Targets

    • Target

      e1f69ae52fdedd722a87b6fe1927d94f_JaffaCakes118

    • Size

      117KB

    • MD5

      e1f69ae52fdedd722a87b6fe1927d94f

    • SHA1

      bbf44dd7bf70e4872432bc82cb6cfac7de5d2aab

    • SHA256

      ddbb885db8467bbe75576bcbec3ac4081c73bea0bd08ea9197ad86db48639810

    • SHA512

      529be3abbb54be09b5b8f552aa0dad12e5fbc195d2a4ff43a8a4c22f531145dcdeee7b5fa7c8d971fbf29a40a6341ca3903bf4f81263cc6d26e9f7f7a1683df2

    • SSDEEP

      3072:0SXMaP2UgekLXP74WLV2c63O2jTwJIGKzD3kp:PcA2UPkLEIO3ZvwYP3A

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

MITRE ATT&CK Enterprise v15

Tasks