Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e0705c0d813c8ff7fabb4cb307559a24_JaffaCakes118

  • Size

    27KB

  • Sample

    241211-h9h1gaxngj

  • MD5

    e0705c0d813c8ff7fabb4cb307559a24

  • SHA1

    abf37ed461f76f4b1681f5e230adfbbc0e9a5028

  • SHA256

    623d5cc3bce00dae7d418df7e0aae677c4559d4c319aa9b6835f2963a58912a4

  • SHA512

    7cc9d82e7e33040262607f446729b7895077c3eef6c4390f3ebf26a3558aa9105304dd7b85fda73335fd4e06fa644aea2d13e969cd152c388b78f6214007b267

  • SSDEEP

    384:2AAHxUSCqujwHKnGQmQwt83EEPT9/qgfi1vOpBlbQtylykECkfm6TJqCAzK9Enmv:YKSCquMH0GQUs9/Hq5OpBlkoPpm

Malware Config

Targets

    • Target

      e0705c0d813c8ff7fabb4cb307559a24_JaffaCakes118

    • Size

      27KB

    • MD5

      e0705c0d813c8ff7fabb4cb307559a24

    • SHA1

      abf37ed461f76f4b1681f5e230adfbbc0e9a5028

    • SHA256

      623d5cc3bce00dae7d418df7e0aae677c4559d4c319aa9b6835f2963a58912a4

    • SHA512

      7cc9d82e7e33040262607f446729b7895077c3eef6c4390f3ebf26a3558aa9105304dd7b85fda73335fd4e06fa644aea2d13e969cd152c388b78f6214007b267

    • SSDEEP

      384:2AAHxUSCqujwHKnGQmQwt83EEPT9/qgfi1vOpBlbQtylykECkfm6TJqCAzK9Enmv:YKSCquMH0GQUs9/Hq5OpBlkoPpm

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Blocklisted process makes network request

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks