Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    523ff3878d408b79bf93683ab78a30ed_JaffaCakes118

  • Size

    1.5MB

  • Sample

    241017-qzkejstalj

  • MD5

    523ff3878d408b79bf93683ab78a30ed

  • SHA1

    272738e8d795a00f2c0dae712164bb5f80c830b4

  • SHA256

    a2309ad10ff563fa1cd7eafd4b4f345a72c83e97c742574c6ce2201bcd55c826

  • SHA512

    10f2ef25753bd884b4debc4a99211fa656a6259a0bfd44d05a74e0c64896b9b4c040b6f6ee20842f5223433fbbebc5ab500af22045a085b36e379ee9105808a8

  • SSDEEP

    24576:disSzlEqF+hVcO3BhSb8vVFwtLKeukot7slmtVQ0b4iDAWzCLieti:d8l8eO3BhS8vwhKBkodNtnl20

Score
7/10

Malware Config

Targets

    • Target

      523ff3878d408b79bf93683ab78a30ed_JaffaCakes118

    • Size

      1.5MB

    • MD5

      523ff3878d408b79bf93683ab78a30ed

    • SHA1

      272738e8d795a00f2c0dae712164bb5f80c830b4

    • SHA256

      a2309ad10ff563fa1cd7eafd4b4f345a72c83e97c742574c6ce2201bcd55c826

    • SHA512

      10f2ef25753bd884b4debc4a99211fa656a6259a0bfd44d05a74e0c64896b9b4c040b6f6ee20842f5223433fbbebc5ab500af22045a085b36e379ee9105808a8

    • SSDEEP

      24576:disSzlEqF+hVcO3BhSb8vVFwtLKeukot7slmtVQ0b4iDAWzCLieti:d8l8eO3BhS8vwhKBkodNtnl20

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      $PLUGINSDIR/ramsetup195.exe

    • Size

      1.4MB

    • MD5

      ff08538cb3d45e33cd82657e4c11d679

    • SHA1

      3f82bf971e5e0d8b08323f6f44e62fad42dd7f38

    • SHA256

      b200bbb9320a0bf96874a2890565b30e3158e42ee0f3e3ae0ec7b7ce41104329

    • SHA512

      cccf86fc6b3d9775f6bd91aa641131623e41d0051be03a7c54d61fb9456d7fb5eb8d0b13ff62ae9cd8260ac767843f8fc9e7da470cc242ce6ccf40bd2a397ca4

    • SSDEEP

      24576:esSzlEqF+hVcO3BhSb8vVFwtLKeukot7slmtVQ0b4iDAWzCLietd:wl8eO3BhS8vwhKBkodNtnl2v

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks