Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    267cf62f10625f64f8fd7310c9c4fbab_JaffaCakes118

  • Size

    45KB

  • Sample

    241008-2hxjbstgpl

  • MD5

    267cf62f10625f64f8fd7310c9c4fbab

  • SHA1

    b35ab0d3d2c8944ec3ca6fa99af9d0cb458c6333

  • SHA256

    a24612ef3031b5253d0b28b31fd2ded73c32885131fade434e069d0fe0f20ef8

  • SHA512

    ed9a96cc852436f79b5434a2e2fef8644468281bd36b81b891182ac0ed16fdb0cd5014295d1214c5203142479d496c4cdd67cf9f83fb1556b9d1d61947200103

  • SSDEEP

    192:6cNhCefrVvNzFCTr312vkWl92NGossJ608vp:68HfrVFaZ3i2MosK6dB

Malware Config

Targets

    • Target

      267cf62f10625f64f8fd7310c9c4fbab_JaffaCakes118

    • Size

      45KB

    • MD5

      267cf62f10625f64f8fd7310c9c4fbab

    • SHA1

      b35ab0d3d2c8944ec3ca6fa99af9d0cb458c6333

    • SHA256

      a24612ef3031b5253d0b28b31fd2ded73c32885131fade434e069d0fe0f20ef8

    • SHA512

      ed9a96cc852436f79b5434a2e2fef8644468281bd36b81b891182ac0ed16fdb0cd5014295d1214c5203142479d496c4cdd67cf9f83fb1556b9d1d61947200103

    • SSDEEP

      192:6cNhCefrVvNzFCTr312vkWl92NGossJ608vp:68HfrVFaZ3i2MosK6dB

    • Modifies WinLogon for persistence

    • Executes dropped EXE

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

MITRE ATT&CK Enterprise v15

Tasks