Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d281bf0819763af7383637901ee65867_JaffaCakes118

  • Size

    472KB

  • Sample

    241207-pxx27axqhr

  • MD5

    d281bf0819763af7383637901ee65867

  • SHA1

    699a157341c73f167764d23fbd219d726f740a36

  • SHA256

    f018e2c20b13c71e3533263f06a88003cfe66bb966d6fe3e0cd6221e7f0f1cfa

  • SHA512

    911c8358db9fa86d690a7f3caf28b8665364f95ddc3a74fe1faf1283b5b7b68242ac46d19f4c091353756cd46c1aee32afc341e128beefe563a3feaa0c1ca58c

  • SSDEEP

    12288:MUxhqJHFtWzSZuNf0CAGEXmEeLW+j0q692:Hk5FtIS0DAGJEeFb68

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.36:8883

Targets

    • Target

      d281bf0819763af7383637901ee65867_JaffaCakes118

    • Size

      472KB

    • MD5

      d281bf0819763af7383637901ee65867

    • SHA1

      699a157341c73f167764d23fbd219d726f740a36

    • SHA256

      f018e2c20b13c71e3533263f06a88003cfe66bb966d6fe3e0cd6221e7f0f1cfa

    • SHA512

      911c8358db9fa86d690a7f3caf28b8665364f95ddc3a74fe1faf1283b5b7b68242ac46d19f4c091353756cd46c1aee32afc341e128beefe563a3feaa0c1ca58c

    • SSDEEP

      12288:MUxhqJHFtWzSZuNf0CAGEXmEeLW+j0q692:Hk5FtIS0DAGJEeFb68

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks