Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    117fb58f5dbe646a53372924499de840_JaffaCakes118

  • Size

    1022KB

  • Sample

    241004-c6xfsstgmc

  • MD5

    117fb58f5dbe646a53372924499de840

  • SHA1

    14c122e9e88dd960baa8e52d3bde672e333dcd44

  • SHA256

    31a49abd1c2b407df1b5dca7766a31725fe1f5ae0b73dc6e2f22b36e24d79bf8

  • SHA512

    447bef79933d038dd3d4a487253a0fa5eaa6ff119b6abfd32af5a499eaffefb4aa0a795232fe01b01234e947257b00ce83adbb7bdc238d912559e81e6866d1ba

  • SSDEEP

    12288:siNTF7cP+H6WA5uYY11WjIYjs3mWvgILI/I0qXxd4xNLn9Kg/zfgFah8/M9:39Zcu6lUzyq2WvgHqfend/Lg0h7

Malware Config

Targets

    • Target

      117fb58f5dbe646a53372924499de840_JaffaCakes118

    • Size

      1022KB

    • MD5

      117fb58f5dbe646a53372924499de840

    • SHA1

      14c122e9e88dd960baa8e52d3bde672e333dcd44

    • SHA256

      31a49abd1c2b407df1b5dca7766a31725fe1f5ae0b73dc6e2f22b36e24d79bf8

    • SHA512

      447bef79933d038dd3d4a487253a0fa5eaa6ff119b6abfd32af5a499eaffefb4aa0a795232fe01b01234e947257b00ce83adbb7bdc238d912559e81e6866d1ba

    • SSDEEP

      12288:siNTF7cP+H6WA5uYY11WjIYjs3mWvgILI/I0qXxd4xNLn9Kg/zfgFah8/M9:39Zcu6lUzyq2WvgHqfend/Lg0h7

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

    • Enumerates VirtualBox registry keys

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks