Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ea6c28c14dfc2e677a12719598473c18_JaffaCakes118

  • Size

    784KB

  • Sample

    240919-czxg8awend

  • MD5

    ea6c28c14dfc2e677a12719598473c18

  • SHA1

    652a58b4c7eb90e2872d9fe19be73c4c2026b64b

  • SHA256

    19feccc89b6033bbd05c02e9c398e5247f85054121ab891f39203a10fd16dfb0

  • SHA512

    75b66d193d720948d3f1895911e2e450879021316a1e3eae8024e93074c1e94fbacadd0a7991160cf54fbd59e72337ebe37ac56836fc87a1f0ce8be219c8bd29

  • SSDEEP

    24576:66xwRkZ0s4gkQuKmynkjoiav7O3y1Ogca6BmKstdhMO:LxPGvgvuLjxUOMZca6cLDl

Malware Config

Targets

    • Target

      ea6c28c14dfc2e677a12719598473c18_JaffaCakes118

    • Size

      784KB

    • MD5

      ea6c28c14dfc2e677a12719598473c18

    • SHA1

      652a58b4c7eb90e2872d9fe19be73c4c2026b64b

    • SHA256

      19feccc89b6033bbd05c02e9c398e5247f85054121ab891f39203a10fd16dfb0

    • SHA512

      75b66d193d720948d3f1895911e2e450879021316a1e3eae8024e93074c1e94fbacadd0a7991160cf54fbd59e72337ebe37ac56836fc87a1f0ce8be219c8bd29

    • SSDEEP

      24576:66xwRkZ0s4gkQuKmynkjoiav7O3y1Ogca6BmKstdhMO:LxPGvgvuLjxUOMZca6cLDl

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks