Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    263995004fd32e48da1b15c88c7f6adf_JaffaCakes118

  • Size

    844KB

  • Sample

    241008-14wngsscmm

  • MD5

    263995004fd32e48da1b15c88c7f6adf

  • SHA1

    747275d015e73a1503dbbf5f244076edd6e3fdf3

  • SHA256

    de4c66fd76cd6824b07818daacf5e9e86426ed608a41b0f7c459d29fa35cc5f3

  • SHA512

    f90fe5fad86835de2c1d71c0ac4d495f74c36c4732346d3807afa2407359db269e818871dcdeb3b65656fe550a77f60e004ff888fe3e9419182493d469bae173

  • SSDEEP

    24576:c2AksuXeUtXPoVucptBP8FAl65/54Xmv+BK++l:lB3tXqhptZ8OI5/om++l

Malware Config

Targets

    • Target

      263995004fd32e48da1b15c88c7f6adf_JaffaCakes118

    • Size

      844KB

    • MD5

      263995004fd32e48da1b15c88c7f6adf

    • SHA1

      747275d015e73a1503dbbf5f244076edd6e3fdf3

    • SHA256

      de4c66fd76cd6824b07818daacf5e9e86426ed608a41b0f7c459d29fa35cc5f3

    • SHA512

      f90fe5fad86835de2c1d71c0ac4d495f74c36c4732346d3807afa2407359db269e818871dcdeb3b65656fe550a77f60e004ff888fe3e9419182493d469bae173

    • SSDEEP

      24576:c2AksuXeUtXPoVucptBP8FAl65/54Xmv+BK++l:lB3tXqhptZ8OI5/om++l

    • Modifies WinLogon for persistence

    • Checks whether UAC is enabled

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks