Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    411f0180b4663a335253a79720d0cc7d_JaffaCakes118

  • Size

    1.1MB

  • Sample

    241013-vwl67aybjg

  • MD5

    411f0180b4663a335253a79720d0cc7d

  • SHA1

    abd8775e18a532c0d9a74068afdf587805c3dab0

  • SHA256

    6dba7cda4004eb0b312938580b1ea8a9bd9dafe8e8aa2f100d08cc13ab9cb911

  • SHA512

    6f076edcc46439724ef827178c4736b0dc2e937d04755ee6cbf862ac2c64824ad91fa8241f251ecca1e7bfa43007f1501af97e133136ee2c13c780d36959e93a

  • SSDEEP

    24576:h1OYdaONOBsFEt5hDG0SAMs9jR/jaJnTJdwY68+UhnWb3aQ4:h1OsKOEt5hDG0SAMs9j8nTJ2Y68hWGQ4

Malware Config

Targets

    • Target

      411f0180b4663a335253a79720d0cc7d_JaffaCakes118

    • Size

      1.1MB

    • MD5

      411f0180b4663a335253a79720d0cc7d

    • SHA1

      abd8775e18a532c0d9a74068afdf587805c3dab0

    • SHA256

      6dba7cda4004eb0b312938580b1ea8a9bd9dafe8e8aa2f100d08cc13ab9cb911

    • SHA512

      6f076edcc46439724ef827178c4736b0dc2e937d04755ee6cbf862ac2c64824ad91fa8241f251ecca1e7bfa43007f1501af97e133136ee2c13c780d36959e93a

    • SSDEEP

      24576:h1OYdaONOBsFEt5hDG0SAMs9jR/jaJnTJdwY68+UhnWb3aQ4:h1OsKOEt5hDG0SAMs9j8nTJ2Y68hWGQ4

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks