Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3b4465726cc08d05f1e34fab4afa300d_JaffaCakes118

  • Size

    28KB

  • Sample

    241012-v7zawsxarl

  • MD5

    3b4465726cc08d05f1e34fab4afa300d

  • SHA1

    c71e0f60bae2897da07838381c620e2f9bfefc1d

  • SHA256

    05a7a4c2e20735ca3823ff57b83fb7dca58cd2ee9c8f8a4769bed9385cae6755

  • SHA512

    a0e383d95bc81f407976b0fc9948133171bf754d92090241dad51507494cf36f59b460f17d04c3428adf1d14daf27a648caa2cf05ec94922abc6eee1858948e4

  • SSDEEP

    384:YB360vym2ZWCSkxpTT6kOiu98z53JSDKTq7PQ:8Xym2RHT6BiHjgKTKPQ

Malware Config

Targets

    • Target

      3b4465726cc08d05f1e34fab4afa300d_JaffaCakes118

    • Size

      28KB

    • MD5

      3b4465726cc08d05f1e34fab4afa300d

    • SHA1

      c71e0f60bae2897da07838381c620e2f9bfefc1d

    • SHA256

      05a7a4c2e20735ca3823ff57b83fb7dca58cd2ee9c8f8a4769bed9385cae6755

    • SHA512

      a0e383d95bc81f407976b0fc9948133171bf754d92090241dad51507494cf36f59b460f17d04c3428adf1d14daf27a648caa2cf05ec94922abc6eee1858948e4

    • SSDEEP

      384:YB360vym2ZWCSkxpTT6kOiu98z53JSDKTq7PQ:8Xym2RHT6BiHjgKTKPQ

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks