Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fb45317f62bbb0ac4e1ef8d8a20a0cd5_JaffaCakes118

  • Size

    315KB

  • Sample

    240928-b7jqnazhrj

  • MD5

    fb45317f62bbb0ac4e1ef8d8a20a0cd5

  • SHA1

    f95a8f9b349680eb39879ebc0294e9e11be69aa4

  • SHA256

    12f9708fdb9e97934249e7494a539cb9266e53116b0ea4f950212da71e68fde9

  • SHA512

    c4bea9132f86a058eef497200b985d31b79e0cd16a1a1db3cfaa84cbcba89ac767c48caa265b0d0e73fb417905cd064eedd2a4d1e42ad02fd8191734a127136e

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sR6XXBXiE27QFk5L6pkPr+Smhcrr8:91OgLda3XXBX8QFDpkPr+Smhcrr8

Malware Config

Targets

    • Target

      fb45317f62bbb0ac4e1ef8d8a20a0cd5_JaffaCakes118

    • Size

      315KB

    • MD5

      fb45317f62bbb0ac4e1ef8d8a20a0cd5

    • SHA1

      f95a8f9b349680eb39879ebc0294e9e11be69aa4

    • SHA256

      12f9708fdb9e97934249e7494a539cb9266e53116b0ea4f950212da71e68fde9

    • SHA512

      c4bea9132f86a058eef497200b985d31b79e0cd16a1a1db3cfaa84cbcba89ac767c48caa265b0d0e73fb417905cd064eedd2a4d1e42ad02fd8191734a127136e

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sR6XXBXiE27QFk5L6pkPr+Smhcrr8:91OgLda3XXBX8QFDpkPr+Smhcrr8

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks