Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    252a53eb823139352a705180bedc5a37_JaffaCakes118

  • Size

    429KB

  • Sample

    241008-zg7lssycjb

  • MD5

    252a53eb823139352a705180bedc5a37

  • SHA1

    65e72461f8b718ce73bd7a635f8bea5a9bff957f

  • SHA256

    ad14a052c2469e5886bf81e18da365ae954411a90f30b538fe33b08eef94f9a7

  • SHA512

    0f62b3c1522d63137f5ad81b3ddea8c5e3e274fdc21863051c70d930d59e1d5d0ac9e808e63dfa24633f988ea655fc95ab6c2b173d93fd44042a03a1fff42b2d

  • SSDEEP

    6144:QXEMSTj/tYm+zoED78n9vOg4N45R44Oel7QAA3CkKXBBeng2HgFUwrnKbZ:1Ff/6z0Oh45C4OelsQPGHgLnS

Malware Config

Targets

    • Target

      252a53eb823139352a705180bedc5a37_JaffaCakes118

    • Size

      429KB

    • MD5

      252a53eb823139352a705180bedc5a37

    • SHA1

      65e72461f8b718ce73bd7a635f8bea5a9bff957f

    • SHA256

      ad14a052c2469e5886bf81e18da365ae954411a90f30b538fe33b08eef94f9a7

    • SHA512

      0f62b3c1522d63137f5ad81b3ddea8c5e3e274fdc21863051c70d930d59e1d5d0ac9e808e63dfa24633f988ea655fc95ab6c2b173d93fd44042a03a1fff42b2d

    • SSDEEP

      6144:QXEMSTj/tYm+zoED78n9vOg4N45R44Oel7QAA3CkKXBBeng2HgFUwrnKbZ:1Ff/6z0Oh45C4OelsQPGHgLnS

    • Blocklisted process makes network request

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks