Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    44466480a3748639fcf6d3799f5862c3_JaffaCakes118

  • Size

    1.1MB

  • Sample

    241014-1c6dlsxekf

  • MD5

    44466480a3748639fcf6d3799f5862c3

  • SHA1

    693d387ede6947f0867a987f09440baf7e0b829b

  • SHA256

    69af7437755248bc496d22986430b664ff5fac936832d0d533343c2c7d343432

  • SHA512

    2ad41bcd9922b2719a44a2209164ebac938fa5f8cdc04abf44ef4af7e113d9df9003ade2ca44440c2d4f5480067cf115d8b9a28028228dead959494022e4a171

  • SSDEEP

    24576:h1OYdaODOBsFEt5hDG0SAMs9jR/jaJnTJdwY68+UhnWb3aQz:h1OsUOEt5hDG0SAMs9j8nTJ2Y68hWGQz

Malware Config

Targets

    • Target

      44466480a3748639fcf6d3799f5862c3_JaffaCakes118

    • Size

      1.1MB

    • MD5

      44466480a3748639fcf6d3799f5862c3

    • SHA1

      693d387ede6947f0867a987f09440baf7e0b829b

    • SHA256

      69af7437755248bc496d22986430b664ff5fac936832d0d533343c2c7d343432

    • SHA512

      2ad41bcd9922b2719a44a2209164ebac938fa5f8cdc04abf44ef4af7e113d9df9003ade2ca44440c2d4f5480067cf115d8b9a28028228dead959494022e4a171

    • SSDEEP

      24576:h1OYdaODOBsFEt5hDG0SAMs9jR/jaJnTJdwY68+UhnWb3aQz:h1OsUOEt5hDG0SAMs9j8nTJ2Y68hWGQz

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks