Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fb5500c06ed22a52c1ed34dc2b4c5372_JaffaCakes118

  • Size

    305KB

  • Sample

    240928-c1l3wasdnm

  • MD5

    fb5500c06ed22a52c1ed34dc2b4c5372

  • SHA1

    9a3574f6e77eba9f22aca8bc09a1cc0dadb86009

  • SHA256

    8ca4b47ae9a0fad5b1aa4b3a2e368fa0938491945a70b888c5c4114914efe7d6

  • SHA512

    e64687367b6ea1d6072d867214f1e59173661b0f62c310ec02097f2b17ff74d8bcdf7fe8c934811b8bd8442c25f7d0d475452e3bbec6b2a7f48343cde02e0df9

  • SSDEEP

    6144:5GSztT72Y0SfzinYKTY1SQshfRPVQe1MZkIYSccr7wbstObPECYeixlYGicUn:5Gqh7SSGYsY1UMqMZJYSN7wbstOb8fvY

Malware Config

Targets

    • Target

      fb5500c06ed22a52c1ed34dc2b4c5372_JaffaCakes118

    • Size

      305KB

    • MD5

      fb5500c06ed22a52c1ed34dc2b4c5372

    • SHA1

      9a3574f6e77eba9f22aca8bc09a1cc0dadb86009

    • SHA256

      8ca4b47ae9a0fad5b1aa4b3a2e368fa0938491945a70b888c5c4114914efe7d6

    • SHA512

      e64687367b6ea1d6072d867214f1e59173661b0f62c310ec02097f2b17ff74d8bcdf7fe8c934811b8bd8442c25f7d0d475452e3bbec6b2a7f48343cde02e0df9

    • SSDEEP

      6144:5GSztT72Y0SfzinYKTY1SQshfRPVQe1MZkIYSccr7wbstObPECYeixlYGicUn:5Gqh7SSGYsY1UMqMZJYSN7wbstOb8fvY

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks