Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    03c151aef988cda0fca2811e1a07a8a2_JaffaCakes118

  • Size

    688KB

  • Sample

    241001-aq8ssawcqe

  • MD5

    03c151aef988cda0fca2811e1a07a8a2

  • SHA1

    c14895f270b49362b925927b112d475d04b43d1d

  • SHA256

    75af57add1b2439e8efc5a5758ced53cca6458b79da1314cf54f10b795a9f675

  • SHA512

    797ef58316044f5a174ee443538ba72321554d04a59ef78c33e6b29f6ef031da2a1e51ba0565b56beed3ced2f1a212cec3fb4a1470859459cc9b0f7d5719eddd

  • SSDEEP

    12288:vsWdVgX1MwKcjZ+fEEIjEOyk/AXqUtQrX2Y5f4ZxRWERvTL6:/zg6wKcV+sECkXyrm4+LvT+

Malware Config

Targets

    • Target

      03c151aef988cda0fca2811e1a07a8a2_JaffaCakes118

    • Size

      688KB

    • MD5

      03c151aef988cda0fca2811e1a07a8a2

    • SHA1

      c14895f270b49362b925927b112d475d04b43d1d

    • SHA256

      75af57add1b2439e8efc5a5758ced53cca6458b79da1314cf54f10b795a9f675

    • SHA512

      797ef58316044f5a174ee443538ba72321554d04a59ef78c33e6b29f6ef031da2a1e51ba0565b56beed3ced2f1a212cec3fb4a1470859459cc9b0f7d5719eddd

    • SSDEEP

      12288:vsWdVgX1MwKcjZ+fEEIjEOyk/AXqUtQrX2Y5f4ZxRWERvTL6:/zg6wKcV+sECkXyrm4+LvT+

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks