Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ea3d6b53b42bb3460b54d09d95a44c1e_JaffaCakes118

  • Size

    197KB

  • Sample

    240919-alzz3s1bjd

  • MD5

    ea3d6b53b42bb3460b54d09d95a44c1e

  • SHA1

    dd689ce09f8e5e67513edab0913d1ed58269ef6d

  • SHA256

    583bbc839ed5ba9a6917166e6dae273bd06c09ef6da393a46dcf56a44a192870

  • SHA512

    cd4a75a17c9a0bf90e2dc05bb2605cbace47dafed4275db650891a23f822c93f22232df392191c1902a3e736ca6980b169abdcf06c536ed6fcbafb23a692294b

  • SSDEEP

    6144:DDtxEPb/lvvHVBfg9t3io4TIJ7gN0AnM1sU1JC0:DkPhvv1aB4vMJC0

Malware Config

Targets

    • Target

      ea3d6b53b42bb3460b54d09d95a44c1e_JaffaCakes118

    • Size

      197KB

    • MD5

      ea3d6b53b42bb3460b54d09d95a44c1e

    • SHA1

      dd689ce09f8e5e67513edab0913d1ed58269ef6d

    • SHA256

      583bbc839ed5ba9a6917166e6dae273bd06c09ef6da393a46dcf56a44a192870

    • SHA512

      cd4a75a17c9a0bf90e2dc05bb2605cbace47dafed4275db650891a23f822c93f22232df392191c1902a3e736ca6980b169abdcf06c536ed6fcbafb23a692294b

    • SSDEEP

      6144:DDtxEPb/lvvHVBfg9t3io4TIJ7gN0AnM1sU1JC0:DkPhvv1aB4vMJC0

    • Modifies WinLogon for persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks