Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    16f3f36cb0306dc02c1067f04648dc63_JaffaCakes118

  • Size

    270KB

  • Sample

    241005-kgf2hswajq

  • MD5

    16f3f36cb0306dc02c1067f04648dc63

  • SHA1

    2907fa5c28e30a058853482d9c3be0b00b449e00

  • SHA256

    59165ce2351115da3f5ec549fe276d12984877dd1b6a5f8fa3997fe8744d6511

  • SHA512

    ee4120352e2192525635ecde6d7934cbea65c1be778294e44d2ee4e93e0edd5c6643b21d79845c9e7d00ec562071524501fefcc6524bade3a27193d9aa1c2693

  • SSDEEP

    6144:2tjpNGqvoArlO+BeiO2/pWTxq/fnx7GDrRcJIcxyCq0hzft:O1vo8AVq/PERcHxywt

Malware Config

Targets

    • Target

      16f3f36cb0306dc02c1067f04648dc63_JaffaCakes118

    • Size

      270KB

    • MD5

      16f3f36cb0306dc02c1067f04648dc63

    • SHA1

      2907fa5c28e30a058853482d9c3be0b00b449e00

    • SHA256

      59165ce2351115da3f5ec549fe276d12984877dd1b6a5f8fa3997fe8744d6511

    • SHA512

      ee4120352e2192525635ecde6d7934cbea65c1be778294e44d2ee4e93e0edd5c6643b21d79845c9e7d00ec562071524501fefcc6524bade3a27193d9aa1c2693

    • SSDEEP

      6144:2tjpNGqvoArlO+BeiO2/pWTxq/fnx7GDrRcJIcxyCq0hzft:O1vo8AVq/PERcHxywt

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks