Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    14dcad3685454f8e5b6d6a720d25c102_JaffaCakes118

  • Size

    411KB

  • Sample

    241004-zj5vzszdqc

  • MD5

    14dcad3685454f8e5b6d6a720d25c102

  • SHA1

    4cf23d414d7af197a02cd6dd30b5906ecb418933

  • SHA256

    dbc9781b741c15fc3d2e619f988dc4c6e8eb19bf03b364c52cba42e867d8390f

  • SHA512

    f9afe584401910594d361fa6d8c785de093c61d62e6776a97cd55dfe96de99cdd34aa98b2f1c07180eb33e543ebfc5dc58f4a01d9e5598af1a4a574cd4df8471

  • SSDEEP

    6144:9GK72mmVAG1TMpolwHuN2iopMCEMozuAg1A:9phRmIUwHuN2iobEMfVq

Malware Config

Targets

    • Target

      14dcad3685454f8e5b6d6a720d25c102_JaffaCakes118

    • Size

      411KB

    • MD5

      14dcad3685454f8e5b6d6a720d25c102

    • SHA1

      4cf23d414d7af197a02cd6dd30b5906ecb418933

    • SHA256

      dbc9781b741c15fc3d2e619f988dc4c6e8eb19bf03b364c52cba42e867d8390f

    • SHA512

      f9afe584401910594d361fa6d8c785de093c61d62e6776a97cd55dfe96de99cdd34aa98b2f1c07180eb33e543ebfc5dc58f4a01d9e5598af1a4a574cd4df8471

    • SSDEEP

      6144:9GK72mmVAG1TMpolwHuN2iopMCEMozuAg1A:9phRmIUwHuN2iobEMfVq

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks