Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fddf0b324266c93fb25b5cfce882be08_JaffaCakes118

  • Size

    40KB

  • Sample

    240929-f1dy2stgmh

  • MD5

    fddf0b324266c93fb25b5cfce882be08

  • SHA1

    d3f43bcf97d0415254a37ffe49ba2018561e709e

  • SHA256

    f831b031b772c80107624d27cea57723eb71e0f78115aae68bc0d686803d0213

  • SHA512

    e584dd5f52a0bdcaffdc8000cdea7015d200ea5a3f3309ecd03bbfcbf0cd47873e72cd78a826cfa09d452039fd7660405a736df2dc2b1068717599bd97106b80

  • SSDEEP

    768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtHY:aqk/Zdic/qjh8w19JDHY

Malware Config

Targets

    • Target

      fddf0b324266c93fb25b5cfce882be08_JaffaCakes118

    • Size

      40KB

    • MD5

      fddf0b324266c93fb25b5cfce882be08

    • SHA1

      d3f43bcf97d0415254a37ffe49ba2018561e709e

    • SHA256

      f831b031b772c80107624d27cea57723eb71e0f78115aae68bc0d686803d0213

    • SHA512

      e584dd5f52a0bdcaffdc8000cdea7015d200ea5a3f3309ecd03bbfcbf0cd47873e72cd78a826cfa09d452039fd7660405a736df2dc2b1068717599bd97106b80

    • SSDEEP

      768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtHY:aqk/Zdic/qjh8w19JDHY

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

    • Executes dropped EXE

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks