Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    07e0eeb09f84740f0d9c6cebadb83a60_JaffaCakes118

  • Size

    880KB

  • Sample

    241001-3lqevswekk

  • MD5

    07e0eeb09f84740f0d9c6cebadb83a60

  • SHA1

    25edbb31de47b1b72d8efa457561486ebef17817

  • SHA256

    45357e4bf1ec6066b6f726d4e2b13059cf5dbb6357a4f5e3812754f4f7174815

  • SHA512

    d235e28ef7777bdd25805f4cae801159c72c42cc4285b9bbf96cf4e4b89036a18ae25647b8eb2aebbbac751237e3a8336d34efe3db147992a18feacf0b89e927

  • SSDEEP

    12288:PVRNBw6Dskah+3H45x2a/dvReTrK/GbpZoivHLin/xbEQFy8PZIhFnhH:NRXM24zeT2+bpZou6xbEQFyAZI3hH

Malware Config

Targets

    • Target

      07e0eeb09f84740f0d9c6cebadb83a60_JaffaCakes118

    • Size

      880KB

    • MD5

      07e0eeb09f84740f0d9c6cebadb83a60

    • SHA1

      25edbb31de47b1b72d8efa457561486ebef17817

    • SHA256

      45357e4bf1ec6066b6f726d4e2b13059cf5dbb6357a4f5e3812754f4f7174815

    • SHA512

      d235e28ef7777bdd25805f4cae801159c72c42cc4285b9bbf96cf4e4b89036a18ae25647b8eb2aebbbac751237e3a8336d34efe3db147992a18feacf0b89e927

    • SSDEEP

      12288:PVRNBw6Dskah+3H45x2a/dvReTrK/GbpZoivHLin/xbEQFy8PZIhFnhH:NRXM24zeT2+bpZou6xbEQFyAZI3hH

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks