Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    766296f06aff0e0a416a692f3dc3720e_JaffaCakes118

  • Size

    1.5MB

  • Sample

    241027-2yt35svfqk

  • MD5

    766296f06aff0e0a416a692f3dc3720e

  • SHA1

    5ffe5d190617a7ce50edf814e163e2c81a46995c

  • SHA256

    3881fa1a920206768be838a3ec4633ea950e9276190cfc7751fdf6ada8593a5f

  • SHA512

    ae81f5127e0f56881800731d7f4c1a87d1d60858ba2ce557d5ff4e982d7c7656cd3911dcabb9d047ef8855f03816c45c09164b1f0c5243649009ea3e7d070d56

  • SSDEEP

    49152:zZgcoNVcYpGgFD8R8qnJ2rSbD6AxJT4643MEeyT+TUt:ico7cqFDZqgrC64d4EyT2Ut

Malware Config

Targets

    • Target

      766296f06aff0e0a416a692f3dc3720e_JaffaCakes118

    • Size

      1.5MB

    • MD5

      766296f06aff0e0a416a692f3dc3720e

    • SHA1

      5ffe5d190617a7ce50edf814e163e2c81a46995c

    • SHA256

      3881fa1a920206768be838a3ec4633ea950e9276190cfc7751fdf6ada8593a5f

    • SHA512

      ae81f5127e0f56881800731d7f4c1a87d1d60858ba2ce557d5ff4e982d7c7656cd3911dcabb9d047ef8855f03816c45c09164b1f0c5243649009ea3e7d070d56

    • SSDEEP

      49152:zZgcoNVcYpGgFD8R8qnJ2rSbD6AxJT4643MEeyT+TUt:ico7cqFDZqgrC64d4EyT2Ut

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks