Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    10237745579c6e8d2711ead2645a8726_JaffaCakes118

  • Size

    250KB

  • Sample

    241003-xjc4vsvbmb

  • MD5

    10237745579c6e8d2711ead2645a8726

  • SHA1

    3a76b387de2082aa33f07aa3eea058df869d9163

  • SHA256

    df4482488a190d932bd7a5159cc74e97490eab23230a182cfbc90d6a65f099bf

  • SHA512

    fd3c5cf047c66857bde4f7691fbd4ccdb97d86576ff3d9b11b021a016f44e3de5b04f2de556f3add4e8693042be0e8cab75b1ba082308d2dda6d858a5ed274ae

  • SSDEEP

    6144:h1OgDPdkBAFZWjadD4s5HKs70y6pJzVbOV5SBgocXSHGLAv:h1OgLdaOqs70ygbOV5SBgoPmLq

Malware Config

Targets

    • Target

      10237745579c6e8d2711ead2645a8726_JaffaCakes118

    • Size

      250KB

    • MD5

      10237745579c6e8d2711ead2645a8726

    • SHA1

      3a76b387de2082aa33f07aa3eea058df869d9163

    • SHA256

      df4482488a190d932bd7a5159cc74e97490eab23230a182cfbc90d6a65f099bf

    • SHA512

      fd3c5cf047c66857bde4f7691fbd4ccdb97d86576ff3d9b11b021a016f44e3de5b04f2de556f3add4e8693042be0e8cab75b1ba082308d2dda6d858a5ed274ae

    • SSDEEP

      6144:h1OgDPdkBAFZWjadD4s5HKs70y6pJzVbOV5SBgocXSHGLAv:h1OgLdaOqs70ygbOV5SBgoPmLq

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks