Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    43aadd71c332c1c4e18e166a764207f9_JaffaCakes118

  • Size

    31KB

  • Sample

    241014-xfs1xavamp

  • MD5

    43aadd71c332c1c4e18e166a764207f9

  • SHA1

    160f56a22f8644962d449fda9008d32138b6e623

  • SHA256

    e926a1e4b80a08aac5df18b80900ea5ef213be1e4660c1332a3372c2cdfecd60

  • SHA512

    53aa37dc4ad170ae7f5437af4b092faacfc3bbc4bea571f8a63c238132dd583c4cceae96fc6ed210f396d830646fbc4708d0b265613ac26f80248d939937b835

  • SSDEEP

    768:TMmEcA0Trm/sAikKo2f9lznI7JRco6GS8BLl:TMRc/Tra9yDyBNS8BR

Malware Config

Targets

    • Target

      43aadd71c332c1c4e18e166a764207f9_JaffaCakes118

    • Size

      31KB

    • MD5

      43aadd71c332c1c4e18e166a764207f9

    • SHA1

      160f56a22f8644962d449fda9008d32138b6e623

    • SHA256

      e926a1e4b80a08aac5df18b80900ea5ef213be1e4660c1332a3372c2cdfecd60

    • SHA512

      53aa37dc4ad170ae7f5437af4b092faacfc3bbc4bea571f8a63c238132dd583c4cceae96fc6ed210f396d830646fbc4708d0b265613ac26f80248d939937b835

    • SSDEEP

      768:TMmEcA0Trm/sAikKo2f9lznI7JRco6GS8BLl:TMRc/Tra9yDyBNS8BR

    • Adds policy Run key to start application

    • Deletes itself

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks