Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    53a0bb8e788ef8b90c15929e558eda26_JaffaCakes118

  • Size

    41KB

  • Sample

    241017-zf6m4sybjq

  • MD5

    53a0bb8e788ef8b90c15929e558eda26

  • SHA1

    af20794e1a444eaa7c4b62806d21b6e4e586433f

  • SHA256

    986a8eeb25f179b162606a52852353d07dcd6cc0c7098f76100102cc2ff7666b

  • SHA512

    fd29c6a5cafb04c566bb42829e889de57adf437afeac41b9257ff99923e274651f86b1f9f8ff9e7fc48cff1393a58e1a4ff6aa980412ac2f85a1c0d0b9a539c0

  • SSDEEP

    768:oJDzG0cBgJk3R/28mbRkJJ4G1o7CeaZw/PRZCDGfIk4K:opG0cDR/5HXZw/pZCDGALK

Malware Config

Targets

    • Target

      53a0bb8e788ef8b90c15929e558eda26_JaffaCakes118

    • Size

      41KB

    • MD5

      53a0bb8e788ef8b90c15929e558eda26

    • SHA1

      af20794e1a444eaa7c4b62806d21b6e4e586433f

    • SHA256

      986a8eeb25f179b162606a52852353d07dcd6cc0c7098f76100102cc2ff7666b

    • SHA512

      fd29c6a5cafb04c566bb42829e889de57adf437afeac41b9257ff99923e274651f86b1f9f8ff9e7fc48cff1393a58e1a4ff6aa980412ac2f85a1c0d0b9a539c0

    • SSDEEP

      768:oJDzG0cBgJk3R/28mbRkJJ4G1o7CeaZw/PRZCDGfIk4K:opG0cDR/5HXZw/pZCDGALK

    • Modifies firewall policy service

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks