Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    36f537087b06eb5ae4ed1ad56be66813_JaffaCakes118

  • Size

    249KB

  • Sample

    241011-1naq3szgjq

  • MD5

    36f537087b06eb5ae4ed1ad56be66813

  • SHA1

    e744b8fee394edd5f8ff7411b040382258f316ba

  • SHA256

    aab4cc77ea6a16269ea3956ccf549783e4903ca5f98f65f29d7126af5d74da9c

  • SHA512

    cd1573f34b36ba07a9b798214516022eb84d753da46a75c0b192d56a2f1d2e4f4e5564df56f284b5b5243714006221d9189452212008b7c1840e47ffad50f91f

  • SSDEEP

    6144:h1OgDPdkBAFZWjadD4s5kNPYWDHnHDveT40Jfu:h1OgLdaOkxlDHnH7edRu

Malware Config

Targets

    • Target

      36f537087b06eb5ae4ed1ad56be66813_JaffaCakes118

    • Size

      249KB

    • MD5

      36f537087b06eb5ae4ed1ad56be66813

    • SHA1

      e744b8fee394edd5f8ff7411b040382258f316ba

    • SHA256

      aab4cc77ea6a16269ea3956ccf549783e4903ca5f98f65f29d7126af5d74da9c

    • SHA512

      cd1573f34b36ba07a9b798214516022eb84d753da46a75c0b192d56a2f1d2e4f4e5564df56f284b5b5243714006221d9189452212008b7c1840e47ffad50f91f

    • SSDEEP

      6144:h1OgDPdkBAFZWjadD4s5kNPYWDHnHDveT40Jfu:h1OgLdaOkxlDHnH7edRu

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks