Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3cfc021fc0ac08a93c07914e0bee61b7_JaffaCakes118

  • Size

    475KB

  • Sample

    241013-bhcwtavhpl

  • MD5

    3cfc021fc0ac08a93c07914e0bee61b7

  • SHA1

    600104fd3da32bbb3042838f2b49063a7018aadc

  • SHA256

    6f23ca0726d1cc6d0949fcc977c185471a52ea455667fe0d8b2c6fe4f8ba1810

  • SHA512

    bca460f934a5ab1d98cfe0f9e9e8dff8c8b1334564e765175d00f8241a4fb49e12973b365334a510efcf7bd1aaf45302e4b26ff68c61a447928a5a22dfe642be

  • SSDEEP

    6144:YFnklflL4oruT1bl3zquTRYztOf+Hy/qVFNcuUAL:xlfA1IGRYMCL

Malware Config

Targets

    • Target

      3cfc021fc0ac08a93c07914e0bee61b7_JaffaCakes118

    • Size

      475KB

    • MD5

      3cfc021fc0ac08a93c07914e0bee61b7

    • SHA1

      600104fd3da32bbb3042838f2b49063a7018aadc

    • SHA256

      6f23ca0726d1cc6d0949fcc977c185471a52ea455667fe0d8b2c6fe4f8ba1810

    • SHA512

      bca460f934a5ab1d98cfe0f9e9e8dff8c8b1334564e765175d00f8241a4fb49e12973b365334a510efcf7bd1aaf45302e4b26ff68c61a447928a5a22dfe642be

    • SSDEEP

      6144:YFnklflL4oruT1bl3zquTRYztOf+Hy/qVFNcuUAL:xlfA1IGRYMCL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks