Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f9dad092e4b7b398646caf508d184a20_JaffaCakes118

  • Size

    394KB

  • Sample

    240927-grthtaybrp

  • MD5

    f9dad092e4b7b398646caf508d184a20

  • SHA1

    b8ff34c25401a48569847e51800825f921f840a3

  • SHA256

    dba197f46afbd2a53ed52cec808f0a9016d87d6a3cccb091c171fea5cce2ee11

  • SHA512

    f9dfdb1f8987ae4a9a0f9e0338acda9a229038e8beaef79b21e0d52c77d6183aaa41ba1fb9a47275ddf7111b6b6d77152c857e991a57175b7fd44df981fdf6fd

  • SSDEEP

    6144:NtKe6YiDdv3m3mgKHIl7bNIAROzTuaGzLcv0vs+Tt9GtJpPk3k69Y1ZAYknox1hC:NtKe6Zv23YdAPaGgN+7GJTZsox9G1uyH

Malware Config

Targets

    • Target

      f9dad092e4b7b398646caf508d184a20_JaffaCakes118

    • Size

      394KB

    • MD5

      f9dad092e4b7b398646caf508d184a20

    • SHA1

      b8ff34c25401a48569847e51800825f921f840a3

    • SHA256

      dba197f46afbd2a53ed52cec808f0a9016d87d6a3cccb091c171fea5cce2ee11

    • SHA512

      f9dfdb1f8987ae4a9a0f9e0338acda9a229038e8beaef79b21e0d52c77d6183aaa41ba1fb9a47275ddf7111b6b6d77152c857e991a57175b7fd44df981fdf6fd

    • SSDEEP

      6144:NtKe6YiDdv3m3mgKHIl7bNIAROzTuaGzLcv0vs+Tt9GtJpPk3k69Y1ZAYknox1hC:NtKe6Zv23YdAPaGgN+7GJTZsox9G1uyH

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Executes dropped EXE

    • Modifies system executable filetype association

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks