Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f0cf03d3a72a79a5fc74e68f3bfa9c9c_JaffaCakes118

  • Size

    100KB

  • Sample

    240921-284ekazcjp

  • MD5

    f0cf03d3a72a79a5fc74e68f3bfa9c9c

  • SHA1

    3f92228a7a8609fbda1bbcbfd369372661541a6e

  • SHA256

    1336151bcc3f2d1c7ae3f782388d5ab5f7a489b989e4c64ef16215638cd3891d

  • SHA512

    863392c182739d78ea2e2b967d86ca2c5a9b4d9a2f7e01ebcdaf677ae5ce9ede6d9b49aa06d062e056769243688d4812c802109ae88356d53ba03acf22724c00

  • SSDEEP

    3072:ePB+MnvZUKzk/HOsS6+Piq9B43kykTsRgo7kY:6rnBFzk/HOsSNE78FY

Malware Config

Targets

    • Target

      f0cf03d3a72a79a5fc74e68f3bfa9c9c_JaffaCakes118

    • Size

      100KB

    • MD5

      f0cf03d3a72a79a5fc74e68f3bfa9c9c

    • SHA1

      3f92228a7a8609fbda1bbcbfd369372661541a6e

    • SHA256

      1336151bcc3f2d1c7ae3f782388d5ab5f7a489b989e4c64ef16215638cd3891d

    • SHA512

      863392c182739d78ea2e2b967d86ca2c5a9b4d9a2f7e01ebcdaf677ae5ce9ede6d9b49aa06d062e056769243688d4812c802109ae88356d53ba03acf22724c00

    • SSDEEP

      3072:ePB+MnvZUKzk/HOsS6+Piq9B43kykTsRgo7kY:6rnBFzk/HOsSNE78FY

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks