Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fccff98b26c44922e8f3080d8aba82de_JaffaCakes118

  • Size

    28KB

  • Sample

    240928-v73cjs1alc

  • MD5

    fccff98b26c44922e8f3080d8aba82de

  • SHA1

    1f391b4c22e9077f755ff0fc3f342b22bfa29345

  • SHA256

    6a6b76f5905ca2684737d785a5caf95d0111d2bcd779dfa418de477af9df9cf6

  • SHA512

    cbc505d969e6bca8238a05a514a43efc2d532089c3c8b548c4dcb601a1f408ab2304ee629de805c6faca0c6f37d7fab99707d1d2dffc6cffedd89d0a048e3489

  • SSDEEP

    768:anOrOuyBwOc80VS71/Ly+/wsBKjadOO+3aP:T6cW1/Ly+/wC2aP

Malware Config

Targets

    • Target

      fccff98b26c44922e8f3080d8aba82de_JaffaCakes118

    • Size

      28KB

    • MD5

      fccff98b26c44922e8f3080d8aba82de

    • SHA1

      1f391b4c22e9077f755ff0fc3f342b22bfa29345

    • SHA256

      6a6b76f5905ca2684737d785a5caf95d0111d2bcd779dfa418de477af9df9cf6

    • SHA512

      cbc505d969e6bca8238a05a514a43efc2d532089c3c8b548c4dcb601a1f408ab2304ee629de805c6faca0c6f37d7fab99707d1d2dffc6cffedd89d0a048e3489

    • SSDEEP

      768:anOrOuyBwOc80VS71/Ly+/wsBKjadOO+3aP:T6cW1/Ly+/wC2aP

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks