Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    378f3d1b9ae41c7621f28c108a099a0e_JaffaCakes118

  • Size

    53KB

  • Sample

    241012-aqwhfswhpn

  • MD5

    378f3d1b9ae41c7621f28c108a099a0e

  • SHA1

    b8f2832b7770bfcf9b1de78dd32af4bac606c494

  • SHA256

    0dc0b4487ba9fc73a5a69d8f8519d0d4fcd0b2038057c19932c523cdc70e9533

  • SHA512

    53ca6358d60d92c519ed466fc208ae82da1078bb181d636631d401ae92d1bc5e49f9631baea61cd4e3b7c35069d3dbad7abd0cdbe0875a84c1be07522eca0bbe

  • SSDEEP

    768:Te3PFaDVyOQgljLDKRJyM3BmsHzSB4us/wJJar6c5QhtY/++RRAVt0wBhUKFuP6p:S3cpyORJLuB4P4AJJS6mQXYD8d8Ki6p

Malware Config

Targets

    • Target

      378f3d1b9ae41c7621f28c108a099a0e_JaffaCakes118

    • Size

      53KB

    • MD5

      378f3d1b9ae41c7621f28c108a099a0e

    • SHA1

      b8f2832b7770bfcf9b1de78dd32af4bac606c494

    • SHA256

      0dc0b4487ba9fc73a5a69d8f8519d0d4fcd0b2038057c19932c523cdc70e9533

    • SHA512

      53ca6358d60d92c519ed466fc208ae82da1078bb181d636631d401ae92d1bc5e49f9631baea61cd4e3b7c35069d3dbad7abd0cdbe0875a84c1be07522eca0bbe

    • SSDEEP

      768:Te3PFaDVyOQgljLDKRJyM3BmsHzSB4us/wJJar6c5QhtY/++RRAVt0wBhUKFuP6p:S3cpyORJLuB4P4AJJS6mQXYD8d8Ki6p

    • Modifies WinLogon for persistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks