Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fa9340d04d68a8c0fff1b54a59272b54_JaffaCakes118

  • Size

    416KB

  • Sample

    240927-rtq6kswhpq

  • MD5

    fa9340d04d68a8c0fff1b54a59272b54

  • SHA1

    ad385317e767c7c261faa42cc16e8411922c9a19

  • SHA256

    03b91c6186d81581f8bf13aaceccbc1297593f803f6e72a2164ebbf4d307e257

  • SHA512

    c2fe6958c0bf7a9ae0ebc6e79aa9ebca49f8e94c29eba93f1cfd45c26afeab8caa9dd50fc87e569dd2aeb349ad419f8fee1eb70ef4ad0ba2ddffe253d72a133a

  • SSDEEP

    12288:JZ6TIoft2yugll2jnAaeX6mXM3W4/Plf:JZ6glQlCn0X6X3WoNf

Malware Config

Targets

    • Target

      fa9340d04d68a8c0fff1b54a59272b54_JaffaCakes118

    • Size

      416KB

    • MD5

      fa9340d04d68a8c0fff1b54a59272b54

    • SHA1

      ad385317e767c7c261faa42cc16e8411922c9a19

    • SHA256

      03b91c6186d81581f8bf13aaceccbc1297593f803f6e72a2164ebbf4d307e257

    • SHA512

      c2fe6958c0bf7a9ae0ebc6e79aa9ebca49f8e94c29eba93f1cfd45c26afeab8caa9dd50fc87e569dd2aeb349ad419f8fee1eb70ef4ad0ba2ddffe253d72a133a

    • SSDEEP

      12288:JZ6TIoft2yugll2jnAaeX6mXM3W4/Plf:JZ6glQlCn0X6X3WoNf

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks