Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    https://cdn.discordapp.com/attachments/824221029240274995/1296988829957357669/JJSploit_8.10.7_x64-setup.exe?ex=6714f339&is=6713a1b9&hm=72f841359f4ee2c0dea65d59ca550ad724169a9e1fb75ee81982119970e22369&

  • Sample

    241020-zjjyhs1cqm

Malware Config

Targets

    • Target

      https://cdn.discordapp.com/attachments/824221029240274995/1296988829957357669/JJSploit_8.10.7_x64-setup.exe?ex=6714f339&is=6713a1b9&hm=72f841359f4ee2c0dea65d59ca550ad724169a9e1fb75ee81982119970e22369&

    • UAC bypass

    • Disables Task Manager via registry modification

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Adds Run key to start application

    • Legitimate hosting services abused for malware hosting/C2

    • Sets desktop wallpaper using registry

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks