Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f00fca35048d203e05a28880eeb832ee_JaffaCakes118

  • Size

    100KB

  • Sample

    240921-sjqbzaygql

  • MD5

    f00fca35048d203e05a28880eeb832ee

  • SHA1

    b2f17f3382e2541dbdf5780921413d4af6c02398

  • SHA256

    502bb2aaf710f60544cab744b17d96c2dacc3c3b9289d94c78dc8133164dfb0a

  • SHA512

    e410f230b81de2f7f8da577d04563155a38e472be882a3f4f99d09a4322cb7ec9bfd06c6e536934d8a94b581843477dddc8f54138a843d663457fdeaada785e2

  • SSDEEP

    1536:4iswEJlDKrfCIiaZB1s0HFpa5UuTHM0mno+cJlId:+JlDMC/ayKF9uTSnohJlId

Malware Config

Targets

    • Target

      f00fca35048d203e05a28880eeb832ee_JaffaCakes118

    • Size

      100KB

    • MD5

      f00fca35048d203e05a28880eeb832ee

    • SHA1

      b2f17f3382e2541dbdf5780921413d4af6c02398

    • SHA256

      502bb2aaf710f60544cab744b17d96c2dacc3c3b9289d94c78dc8133164dfb0a

    • SHA512

      e410f230b81de2f7f8da577d04563155a38e472be882a3f4f99d09a4322cb7ec9bfd06c6e536934d8a94b581843477dddc8f54138a843d663457fdeaada785e2

    • SSDEEP

      1536:4iswEJlDKrfCIiaZB1s0HFpa5UuTHM0mno+cJlId:+JlDMC/ayKF9uTSnohJlId

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks