Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    091dee4a62a73e6f545e87fbccf0c691_JaffaCakes118

  • Size

    206KB

  • Sample

    241002-f75qcazbjj

  • MD5

    091dee4a62a73e6f545e87fbccf0c691

  • SHA1

    b1484f5dccd8f37329fb7cccad0f6910694cb114

  • SHA256

    515df8e6b3442d1b1478c9dd60f9372a6624affa4da97c95259769830837eccf

  • SHA512

    3560647e7f80d67e2630e401eee7cdf9b9b9b3d733e2cb2130bb7138b12b6743dc49758c7f5e10b7901a1b40ff30fd33f5f557d3f3fef0f33ace4807e2b70e13

  • SSDEEP

    3072:bbluj2AgK1S4lQ/qml80FqCKmgTRHGvcqRI0NU/iYyA4g:bbl5RKgOGqml80FrgTRHGvJI08iYJ

Malware Config

Targets

    • Target

      091dee4a62a73e6f545e87fbccf0c691_JaffaCakes118

    • Size

      206KB

    • MD5

      091dee4a62a73e6f545e87fbccf0c691

    • SHA1

      b1484f5dccd8f37329fb7cccad0f6910694cb114

    • SHA256

      515df8e6b3442d1b1478c9dd60f9372a6624affa4da97c95259769830837eccf

    • SHA512

      3560647e7f80d67e2630e401eee7cdf9b9b9b3d733e2cb2130bb7138b12b6743dc49758c7f5e10b7901a1b40ff30fd33f5f557d3f3fef0f33ace4807e2b70e13

    • SSDEEP

      3072:bbluj2AgK1S4lQ/qml80FqCKmgTRHGvcqRI0NU/iYyA4g:bbl5RKgOGqml80FrgTRHGvJI08iYJ

    • Modifies WinLogon for persistence

    • Modifies visiblity of hidden/system files in Explorer

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks