Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0d2d6c1447161049b994e67c6cf23f48_JaffaCakes118

  • Size

    15KB

  • Sample

    241003-a74kdswark

  • MD5

    0d2d6c1447161049b994e67c6cf23f48

  • SHA1

    4fccf4516de22f871b8f9c25948ec2700512fd2d

  • SHA256

    06bf3caf16228b983dc3abd6b3f062d1675c74cb57d2382f283a711aef2aba41

  • SHA512

    8606bfdff33270b72d5dd7b666c379c8a6bc3d0a24b2ad8de4537ca7e4575df37dfe73eeecd18d45ae950e656306571a3f5f045c383e6b61ba699cfed489d065

  • SSDEEP

    384:EWW0k69j9qvm3bRZip5Pgf8fCKACRAEzJDZEx:EWp2m31N8fCnCxzJDix

Malware Config

Targets

    • Target

      0d2d6c1447161049b994e67c6cf23f48_JaffaCakes118

    • Size

      15KB

    • MD5

      0d2d6c1447161049b994e67c6cf23f48

    • SHA1

      4fccf4516de22f871b8f9c25948ec2700512fd2d

    • SHA256

      06bf3caf16228b983dc3abd6b3f062d1675c74cb57d2382f283a711aef2aba41

    • SHA512

      8606bfdff33270b72d5dd7b666c379c8a6bc3d0a24b2ad8de4537ca7e4575df37dfe73eeecd18d45ae950e656306571a3f5f045c383e6b61ba699cfed489d065

    • SSDEEP

      384:EWW0k69j9qvm3bRZip5Pgf8fCKACRAEzJDZEx:EWp2m31N8fCnCxzJDix

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

MITRE ATT&CK Enterprise v15

Tasks