Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2900ebdc6509c31143d2e906c8564641_JaffaCakes118

  • Size

    447KB

  • Sample

    241009-cnt8qaxdne

  • MD5

    2900ebdc6509c31143d2e906c8564641

  • SHA1

    11d835fd29ec292f1458af5092bc9af9c79afe01

  • SHA256

    9ebd86e1e9ee094853f72c3b69e3b45f06b57beac8ff4a222e0e32efd1e26cce

  • SHA512

    5ba0611f9f393c43a1c0b59c6262c686944e16eb3b6f75316ae575d5a17ebefa6993f95da988e72fa0703ecdedfa22f0d0d3bcdb8810db6fb5e87d9d306f493e

  • SSDEEP

    12288:z52k/5CJKfPZxKJpSEIP13toJrq0W55T6:drcOPuHd6puJ+P55W

Malware Config

Targets

    • Target

      2900ebdc6509c31143d2e906c8564641_JaffaCakes118

    • Size

      447KB

    • MD5

      2900ebdc6509c31143d2e906c8564641

    • SHA1

      11d835fd29ec292f1458af5092bc9af9c79afe01

    • SHA256

      9ebd86e1e9ee094853f72c3b69e3b45f06b57beac8ff4a222e0e32efd1e26cce

    • SHA512

      5ba0611f9f393c43a1c0b59c6262c686944e16eb3b6f75316ae575d5a17ebefa6993f95da988e72fa0703ecdedfa22f0d0d3bcdb8810db6fb5e87d9d306f493e

    • SSDEEP

      12288:z52k/5CJKfPZxKJpSEIP13toJrq0W55T6:drcOPuHd6puJ+P55W

    • Credentials from Password Stores: Windows Credential Manager

      Suspicious access to Credentials History.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks