Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1618b70040a67d91ee2b90537c1e8ec1_JaffaCakes118

  • Size

    117KB

  • Sample

    241005-eqexxsvcjp

  • MD5

    1618b70040a67d91ee2b90537c1e8ec1

  • SHA1

    42bbe29f65e08350238e23ec31bb4f88857d59d9

  • SHA256

    1db9c9d526bf9b23627d15a2c5cd0f29aac3e141e62bb134f5ee59a6b99c4f94

  • SHA512

    af93262acd32e6bbe8fad475d23d4179f43c191876ee2fcfe4d417703907579aaafc8bd8666f649e1d06a4158fb9d277ff93665f1a85d49d5f63ff8bfc798b8a

  • SSDEEP

    3072:zGrzJgxC5+ITyLZYB+TAp9Rj2idAEjrWmc3+zIjB+FQJD:S3Sk+ITyLItbRn9jr7/zIjEQJD

Malware Config

Targets

    • Target

      1618b70040a67d91ee2b90537c1e8ec1_JaffaCakes118

    • Size

      117KB

    • MD5

      1618b70040a67d91ee2b90537c1e8ec1

    • SHA1

      42bbe29f65e08350238e23ec31bb4f88857d59d9

    • SHA256

      1db9c9d526bf9b23627d15a2c5cd0f29aac3e141e62bb134f5ee59a6b99c4f94

    • SHA512

      af93262acd32e6bbe8fad475d23d4179f43c191876ee2fcfe4d417703907579aaafc8bd8666f649e1d06a4158fb9d277ff93665f1a85d49d5f63ff8bfc798b8a

    • SSDEEP

      3072:zGrzJgxC5+ITyLZYB+TAp9Rj2idAEjrWmc3+zIjB+FQJD:S3Sk+ITyLItbRn9jr7/zIjEQJD

    • Modifies WinLogon for persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks