Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    103dbe92b3bc8a29ffe0e87b0981ae73_JaffaCakes118

  • Size

    252KB

  • Sample

    241003-x5v7kasern

  • MD5

    103dbe92b3bc8a29ffe0e87b0981ae73

  • SHA1

    7c443e543499f871d5dd11e742fb8029ef19359a

  • SHA256

    a31ad6e5eddfa686c051dc2424d9336a67ada39516cb1e4990a9ef1cccaad7e5

  • SHA512

    055d0f9956e6b626264ce89ac8f98ea14c39327d6410f063ffaeb4a6d128a0bcfa23d35f55f4551ca8e9fc0b6aee3a6dbee94361acc1c673391a5bd4df9ce93f

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4siDyhJ2XTCVdKA/iOt:91OgLdaJUJ2XT0Mny

Malware Config

Targets

    • Target

      103dbe92b3bc8a29ffe0e87b0981ae73_JaffaCakes118

    • Size

      252KB

    • MD5

      103dbe92b3bc8a29ffe0e87b0981ae73

    • SHA1

      7c443e543499f871d5dd11e742fb8029ef19359a

    • SHA256

      a31ad6e5eddfa686c051dc2424d9336a67ada39516cb1e4990a9ef1cccaad7e5

    • SHA512

      055d0f9956e6b626264ce89ac8f98ea14c39327d6410f063ffaeb4a6d128a0bcfa23d35f55f4551ca8e9fc0b6aee3a6dbee94361acc1c673391a5bd4df9ce93f

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4siDyhJ2XTCVdKA/iOt:91OgLdaJUJ2XT0Mny

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks