Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    57afc1b5960bb608182abd12a58234be_JaffaCakes118

  • Size

    2.4MB

  • Sample

    241018-qp1c1sygmf

  • MD5

    57afc1b5960bb608182abd12a58234be

  • SHA1

    6735f85df90241d73ca19c26ac317d026246f77f

  • SHA256

    8f68eb8ffa98659495ea1a891b2b5aedbb6d02756836328f1ffb864740049b34

  • SHA512

    4194af0c56892b049822c1a1e8d66168c8abeb5b6e9140486ac832ded005600fb65cc369cc52e8ce0808319b9451602d5025209316cabadf3d3698184530a38a

  • SSDEEP

    49152:VQptQCtiyQhkFNrP5Tyl+mP4M338dB2IBlGuuDVUsdxxjr:Cp6GEOhTyl+mgg3gnl/IVUs1jr

Score
10/10

Malware Config

Extracted

Family

gozi

Targets

    • Target

      57afc1b5960bb608182abd12a58234be_JaffaCakes118

    • Size

      2.4MB

    • MD5

      57afc1b5960bb608182abd12a58234be

    • SHA1

      6735f85df90241d73ca19c26ac317d026246f77f

    • SHA256

      8f68eb8ffa98659495ea1a891b2b5aedbb6d02756836328f1ffb864740049b34

    • SHA512

      4194af0c56892b049822c1a1e8d66168c8abeb5b6e9140486ac832ded005600fb65cc369cc52e8ce0808319b9451602d5025209316cabadf3d3698184530a38a

    • SSDEEP

      49152:VQptQCtiyQhkFNrP5Tyl+mP4M338dB2IBlGuuDVUsdxxjr:Cp6GEOhTyl+mgg3gnl/IVUs1jr

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks