Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e3e78357f0cc2232cde1e7f997327db2_JaffaCakes118

  • Size

    301KB

  • Sample

    241212-ayawqatqet

  • MD5

    e3e78357f0cc2232cde1e7f997327db2

  • SHA1

    a3ece7efa77d49b76fb17e2cdb8c8c95708a0913

  • SHA256

    efc25b918dd31687dd5edb36bac670ae1a10213b89ea0a9aa99c60f3cb02c4bf

  • SHA512

    e3ee53352f9c9aed60d470d3ebe4fe294c2f5b2f5fe987f7cbea40e278433e637a41131c99f8b70f65dc3e5d1ec1291c10be8db8d16da969bf9ea48fb76b3f34

  • SSDEEP

    6144:I3lbdiKJKTloAdbvaO8okZuDiXU10bhmtNash4Ij:y3KTloAFz8oMuDiZkNlaIj

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      e3e78357f0cc2232cde1e7f997327db2_JaffaCakes118

    • Size

      301KB

    • MD5

      e3e78357f0cc2232cde1e7f997327db2

    • SHA1

      a3ece7efa77d49b76fb17e2cdb8c8c95708a0913

    • SHA256

      efc25b918dd31687dd5edb36bac670ae1a10213b89ea0a9aa99c60f3cb02c4bf

    • SHA512

      e3ee53352f9c9aed60d470d3ebe4fe294c2f5b2f5fe987f7cbea40e278433e637a41131c99f8b70f65dc3e5d1ec1291c10be8db8d16da969bf9ea48fb76b3f34

    • SSDEEP

      6144:I3lbdiKJKTloAdbvaO8okZuDiXU10bhmtNash4Ij:y3KTloAFz8oMuDiZkNlaIj

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks