Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2fbe2bd605728386f4566aed0c51edf1_JaffaCakes118

  • Size

    250KB

  • Sample

    241009-mt8y6swdkf

  • MD5

    2fbe2bd605728386f4566aed0c51edf1

  • SHA1

    75a09f06bdde266ffc5144137d29d8f528025774

  • SHA256

    2533032b4347723181799b2eaba6651e392fc52f92303d3b48934746c3ae8220

  • SHA512

    a465358d9b1c6d9c7cab6a7e02af4b4836ef518736a43eb1d76e9205b70040429f1515b3c45ea2add2109b4ed1bbb2dfc4cd0914a5ad7b4371aff3c4952b430f

  • SSDEEP

    6144:h1OgDPdkBAFZWjadD4s5qtAjEuy0ZTqUn2LnhuBp7k:h1OgLdaOrEFykhuo

Malware Config

Targets

    • Target

      2fbe2bd605728386f4566aed0c51edf1_JaffaCakes118

    • Size

      250KB

    • MD5

      2fbe2bd605728386f4566aed0c51edf1

    • SHA1

      75a09f06bdde266ffc5144137d29d8f528025774

    • SHA256

      2533032b4347723181799b2eaba6651e392fc52f92303d3b48934746c3ae8220

    • SHA512

      a465358d9b1c6d9c7cab6a7e02af4b4836ef518736a43eb1d76e9205b70040429f1515b3c45ea2add2109b4ed1bbb2dfc4cd0914a5ad7b4371aff3c4952b430f

    • SSDEEP

      6144:h1OgDPdkBAFZWjadD4s5qtAjEuy0ZTqUn2LnhuBp7k:h1OgLdaOrEFykhuo

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks