Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    163e8df577ef8722e408912466367f50_JaffaCakes118

  • Size

    514KB

  • Sample

    241005-fk6dcs1cma

  • MD5

    163e8df577ef8722e408912466367f50

  • SHA1

    9df6fd0508a900bbf6213b4b0529ad7b2a84bfe7

  • SHA256

    2fd7ba0ea36b5087c441662ba65f8c0fce99e8881df66223bddf147ed6fe2440

  • SHA512

    e024a5a1431d0c3a44c1d89910ad793dd4c2c6b048c300028bd7b997153dcf54246ad7bdac78806b0015631380d4c153486f58b7d76f7eb1370995cff6651fda

  • SSDEEP

    6144:st9sTEcg7/EpK3ee4wgv3KN+xIISYswjAel0bQz9iRSZkB3Ju/H:s6Dg7cnwgv3xxdhYoZklJuP

Malware Config

Targets

    • Target

      163e8df577ef8722e408912466367f50_JaffaCakes118

    • Size

      514KB

    • MD5

      163e8df577ef8722e408912466367f50

    • SHA1

      9df6fd0508a900bbf6213b4b0529ad7b2a84bfe7

    • SHA256

      2fd7ba0ea36b5087c441662ba65f8c0fce99e8881df66223bddf147ed6fe2440

    • SHA512

      e024a5a1431d0c3a44c1d89910ad793dd4c2c6b048c300028bd7b997153dcf54246ad7bdac78806b0015631380d4c153486f58b7d76f7eb1370995cff6651fda

    • SSDEEP

      6144:st9sTEcg7/EpK3ee4wgv3KN+xIISYswjAel0bQz9iRSZkB3Ju/H:s6Dg7cnwgv3xxdhYoZklJuP

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks