Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f0816685648d875ca4a0c1a0681544e6_JaffaCakes118

  • Size

    341KB

  • Sample

    240921-yqa4hs1anm

  • MD5

    f0816685648d875ca4a0c1a0681544e6

  • SHA1

    3468a45b1bd7a3d96bb653ff4229e64d798f8163

  • SHA256

    9367457b51bb9acabf2388b137ab9336cd8a5166d9a5e5d394d8a1f42866036c

  • SHA512

    01866ab64a17c98c1e8352a0041ea9702cdc2cbf573e1d2dbcdb713f3826f04947f79e59bb7bd5523283611073fe5323bbe3938204ac5394ae17357ac782d30a

  • SSDEEP

    6144:saqh/gnshcVfZk+lBPYkzyTN348UMUZaGmIwquU:uZgnOujlW+yTNOMUlmIwqP

Malware Config

Targets

    • Target

      f0816685648d875ca4a0c1a0681544e6_JaffaCakes118

    • Size

      341KB

    • MD5

      f0816685648d875ca4a0c1a0681544e6

    • SHA1

      3468a45b1bd7a3d96bb653ff4229e64d798f8163

    • SHA256

      9367457b51bb9acabf2388b137ab9336cd8a5166d9a5e5d394d8a1f42866036c

    • SHA512

      01866ab64a17c98c1e8352a0041ea9702cdc2cbf573e1d2dbcdb713f3826f04947f79e59bb7bd5523283611073fe5323bbe3938204ac5394ae17357ac782d30a

    • SSDEEP

      6144:saqh/gnshcVfZk+lBPYkzyTN348UMUZaGmIwquU:uZgnOujlW+yTNOMUlmIwqP

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks