Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fd1d0dfe712ab423428e83510c20afc6_JaffaCakes118

  • Size

    168KB

  • Sample

    240928-zkr1hsydmg

  • MD5

    fd1d0dfe712ab423428e83510c20afc6

  • SHA1

    711006952e47cdbda316ecd2ca1f7cf789a50488

  • SHA256

    8474fe41166c39378ddac930ff2a1a218848f60a892ea69a784303ad2c0ee16a

  • SHA512

    0c14227962cae2fe19fd02bb3e1d03a1caaf90386d2513f0f6f99bf607cd4b8f7ffcac59dc31fa0681047e6d131758aa2223402f6ea588a9164af91bd762ea85

  • SSDEEP

    3072:8woIzHZuCZm9f3UgY2057qE1QIG5FpOFju05o7znMXENYYscnY:8whZu19/UgnQqe8vpOFju05oPIgHY

Malware Config

Targets

    • Target

      fd1d0dfe712ab423428e83510c20afc6_JaffaCakes118

    • Size

      168KB

    • MD5

      fd1d0dfe712ab423428e83510c20afc6

    • SHA1

      711006952e47cdbda316ecd2ca1f7cf789a50488

    • SHA256

      8474fe41166c39378ddac930ff2a1a218848f60a892ea69a784303ad2c0ee16a

    • SHA512

      0c14227962cae2fe19fd02bb3e1d03a1caaf90386d2513f0f6f99bf607cd4b8f7ffcac59dc31fa0681047e6d131758aa2223402f6ea588a9164af91bd762ea85

    • SSDEEP

      3072:8woIzHZuCZm9f3UgY2057qE1QIG5FpOFju05o7znMXENYYscnY:8whZu19/UgnQqe8vpOFju05oPIgHY

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks