Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    faf8db027408575c7f6178890e2a9058_JaffaCakes118

  • Size

    125KB

  • Sample

    240927-1swjcatfjh

  • MD5

    faf8db027408575c7f6178890e2a9058

  • SHA1

    e22dc27f9528adf96cad0039eaea83f5b1523510

  • SHA256

    533020ef7182401d4cb5bdf8324f835a9e9edcb23b9a7f0485721cdcf58f532d

  • SHA512

    c996edf150d3978d5dc65901e9c325818dc495d621d7ce286987c28b638a190d20f4494a8cd6b3c52be9b3b5da646ed51cb5da547ce0d234e2520860397122e3

  • SSDEEP

    3072:zVvRYdan7my+GSIL++YATge3z+WW5v8Mlx:zVvSQn7HL+YkVn8ox

Malware Config

Targets

    • Target

      faf8db027408575c7f6178890e2a9058_JaffaCakes118

    • Size

      125KB

    • MD5

      faf8db027408575c7f6178890e2a9058

    • SHA1

      e22dc27f9528adf96cad0039eaea83f5b1523510

    • SHA256

      533020ef7182401d4cb5bdf8324f835a9e9edcb23b9a7f0485721cdcf58f532d

    • SHA512

      c996edf150d3978d5dc65901e9c325818dc495d621d7ce286987c28b638a190d20f4494a8cd6b3c52be9b3b5da646ed51cb5da547ce0d234e2520860397122e3

    • SSDEEP

      3072:zVvRYdan7my+GSIL++YATge3z+WW5v8Mlx:zVvSQn7HL+YkVn8ox

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks