Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fb751857341086ea2032813b91c2b051_JaffaCakes118

  • Size

    125KB

  • Sample

    240928-ejjyaswbll

  • MD5

    fb751857341086ea2032813b91c2b051

  • SHA1

    4c3ba6a297e43f820f7d9be351a9297372d2300a

  • SHA256

    536d16055565a85063a9f86885bedb38acff6c46c18d1e56efd9062ff283ce07

  • SHA512

    30fa51649d2793071c168927611b9deded89a3ed7fe68cd7cb45c691adec182f08f17e0df4c2eca811265b7f207cd20bb790aeeccd35a34827376eac5376196e

  • SSDEEP

    3072:IqQaZy2WiO4hNF5BMygfxoXwPNMpmPm2RDjb/ngQXNCmlKloutY:VQaVO4nJn00mdjb/7XkmKloS

Malware Config

Targets

    • Target

      fb751857341086ea2032813b91c2b051_JaffaCakes118

    • Size

      125KB

    • MD5

      fb751857341086ea2032813b91c2b051

    • SHA1

      4c3ba6a297e43f820f7d9be351a9297372d2300a

    • SHA256

      536d16055565a85063a9f86885bedb38acff6c46c18d1e56efd9062ff283ce07

    • SHA512

      30fa51649d2793071c168927611b9deded89a3ed7fe68cd7cb45c691adec182f08f17e0df4c2eca811265b7f207cd20bb790aeeccd35a34827376eac5376196e

    • SSDEEP

      3072:IqQaZy2WiO4hNF5BMygfxoXwPNMpmPm2RDjb/ngQXNCmlKloutY:VQaVO4nJn00mdjb/7XkmKloS

    • Drops file in Drivers directory

    • Sets service image path in registry

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks