Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ed9ba968cf6a93ebba90300b0b2612c8_JaffaCakes118

  • Size

    671KB

  • Sample

    240920-pwhacawhma

  • MD5

    ed9ba968cf6a93ebba90300b0b2612c8

  • SHA1

    d43deff0b4a7c2965188cad97c3676d7414df4dd

  • SHA256

    236a1324e2b2b298e2d6476befc3ce17c4a300e738b28015d1560233294d731e

  • SHA512

    a0cbf897bb490a9cf61875065f291120cb15a712a1180bd5cb1b78bcd4347ff91bc95fafcb6b3df38839fb68abfce9cc433b9e98e437772b6f1c962821cbd185

  • SSDEEP

    12288:9LrjSxMZqym7GQ25b9U/60VlBph9lZvF3Z4mxxTvCG+Q396:93rwym79YbgTHvQmXTvCGB6

Malware Config

Targets

    • Target

      ed9ba968cf6a93ebba90300b0b2612c8_JaffaCakes118

    • Size

      671KB

    • MD5

      ed9ba968cf6a93ebba90300b0b2612c8

    • SHA1

      d43deff0b4a7c2965188cad97c3676d7414df4dd

    • SHA256

      236a1324e2b2b298e2d6476befc3ce17c4a300e738b28015d1560233294d731e

    • SHA512

      a0cbf897bb490a9cf61875065f291120cb15a712a1180bd5cb1b78bcd4347ff91bc95fafcb6b3df38839fb68abfce9cc433b9e98e437772b6f1c962821cbd185

    • SSDEEP

      12288:9LrjSxMZqym7GQ25b9U/60VlBph9lZvF3Z4mxxTvCG+Q396:93rwym79YbgTHvQmXTvCGB6

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks