Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    289af770d953baa6589b2ec924ed6ef1_JaffaCakes118

  • Size

    717KB

  • Sample

    241009-b47nbathqa

  • MD5

    289af770d953baa6589b2ec924ed6ef1

  • SHA1

    0037990a64f8a7b38b8d476fdc1f701c8b375fdd

  • SHA256

    1b34e65d6b45e671fe10e44da379504e18f754559a4af4139752c86b215d318c

  • SHA512

    70c7165e84d7bbc98467328f96d554b81d6fce3bc18d84d258c4f29dadd5b3572803d86f989e1be998b741557d500d1776ce05487c3750d965500cb8d38087c5

  • SSDEEP

    12288:BKnekrL58uf9JWqB5+R4De9PlHSyKpu27gnlT5K4I7sRmB8GXSCGvEWfhH:OLiuaqzqfuu20ahsgBkCYEW1

Malware Config

Targets

    • Target

      289af770d953baa6589b2ec924ed6ef1_JaffaCakes118

    • Size

      717KB

    • MD5

      289af770d953baa6589b2ec924ed6ef1

    • SHA1

      0037990a64f8a7b38b8d476fdc1f701c8b375fdd

    • SHA256

      1b34e65d6b45e671fe10e44da379504e18f754559a4af4139752c86b215d318c

    • SHA512

      70c7165e84d7bbc98467328f96d554b81d6fce3bc18d84d258c4f29dadd5b3572803d86f989e1be998b741557d500d1776ce05487c3750d965500cb8d38087c5

    • SSDEEP

      12288:BKnekrL58uf9JWqB5+R4De9PlHSyKpu27gnlT5K4I7sRmB8GXSCGvEWfhH:OLiuaqzqfuu20ahsgBkCYEW1

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks