Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0624c43699e11e05e7f784bebcf17768_JaffaCakes118

  • Size

    1.6MB

  • Sample

    241001-rf848sxdrh

  • MD5

    0624c43699e11e05e7f784bebcf17768

  • SHA1

    9058c4eaad185dd7b22a67198f51baa6b4f13cb0

  • SHA256

    94cb5e84212a6353fd3386f2d83f5b864c64f4bd3207eff718a843d172011a1f

  • SHA512

    4a40fa2bba990473d32abadcf88ed62f15790668d9b556e3a13994fd60a0194c762ea68c276a35f6923d72cd23e587fb0caddf62611b950edf09db2a1a57dce1

  • SSDEEP

    49152:WQagM/VkLHwbwexxcTcoOfhc8AxOVnbw+ij/TtCUjnbIM:ZEVkLAxPo0c8hB9ijnjbJ

Malware Config

Targets

    • Target

      0624c43699e11e05e7f784bebcf17768_JaffaCakes118

    • Size

      1.6MB

    • MD5

      0624c43699e11e05e7f784bebcf17768

    • SHA1

      9058c4eaad185dd7b22a67198f51baa6b4f13cb0

    • SHA256

      94cb5e84212a6353fd3386f2d83f5b864c64f4bd3207eff718a843d172011a1f

    • SHA512

      4a40fa2bba990473d32abadcf88ed62f15790668d9b556e3a13994fd60a0194c762ea68c276a35f6923d72cd23e587fb0caddf62611b950edf09db2a1a57dce1

    • SSDEEP

      49152:WQagM/VkLHwbwexxcTcoOfhc8AxOVnbw+ij/TtCUjnbIM:ZEVkLAxPo0c8hB9ijnjbJ

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks