Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    13089e755ec08ad49415214b74684eb5_JaffaCakes118

  • Size

    824KB

  • Sample

    241004-mxhamatglc

  • MD5

    13089e755ec08ad49415214b74684eb5

  • SHA1

    09b08bf9d65d8008c351cc34c456bc7e0e0be9c2

  • SHA256

    d03d3270d9258246ad35711f91a0446b7230ba02807908d30b5210af6fb012a4

  • SHA512

    e64a23e8e3ba7be0b176eefc0f4b50edfa7e9f38f42df76b7dcafc0969474c690771f91cdd36f43ef1c3a2e5c69490bfbaf26e8094ce5f3bcc11be1b4d7dad25

  • SSDEEP

    24576:JduSx2vQnl237geGuDZ+MbARicyYE1vPUzWD2UMcdf:T7x2vqt3GAMcJE1vPUzWD2Ur

Malware Config

Targets

    • Target

      13089e755ec08ad49415214b74684eb5_JaffaCakes118

    • Size

      824KB

    • MD5

      13089e755ec08ad49415214b74684eb5

    • SHA1

      09b08bf9d65d8008c351cc34c456bc7e0e0be9c2

    • SHA256

      d03d3270d9258246ad35711f91a0446b7230ba02807908d30b5210af6fb012a4

    • SHA512

      e64a23e8e3ba7be0b176eefc0f4b50edfa7e9f38f42df76b7dcafc0969474c690771f91cdd36f43ef1c3a2e5c69490bfbaf26e8094ce5f3bcc11be1b4d7dad25

    • SSDEEP

      24576:JduSx2vQnl237geGuDZ+MbARicyYE1vPUzWD2UMcdf:T7x2vqt3GAMcJE1vPUzWD2Ur

    • Reads WinSCP keys stored on the system

      Tries to access WinSCP stored sessions.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks