Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e7d5e6dde646af391da17c485861ee5e_JaffaCakes118

  • Size

    75KB

  • Sample

    241212-xr5tvatqaz

  • MD5

    e7d5e6dde646af391da17c485861ee5e

  • SHA1

    c22f3b657943cc5bf6191c5816d568d2885918e8

  • SHA256

    e6270fb29a04bd2a667875b4d9af9dfac0634dcd90c651a63dc42c078b2bad56

  • SHA512

    e2c72e37113b545541fb9867a67eb7cd8031634f0949f2e0cdc6754924864244ece9f45fca2e6e628cd0fe594b3065d858b7e706d066655ba710a93e17feff00

  • SSDEEP

    1536:xTg2nOVaPv6mgBxuc1uaJ260KmW/eSqXigpbSdu8:Jg2nOV4fgBP1r5/eSQr8du8

Malware Config

Targets

    • Target

      e7d5e6dde646af391da17c485861ee5e_JaffaCakes118

    • Size

      75KB

    • MD5

      e7d5e6dde646af391da17c485861ee5e

    • SHA1

      c22f3b657943cc5bf6191c5816d568d2885918e8

    • SHA256

      e6270fb29a04bd2a667875b4d9af9dfac0634dcd90c651a63dc42c078b2bad56

    • SHA512

      e2c72e37113b545541fb9867a67eb7cd8031634f0949f2e0cdc6754924864244ece9f45fca2e6e628cd0fe594b3065d858b7e706d066655ba710a93e17feff00

    • SSDEEP

      1536:xTg2nOVaPv6mgBxuc1uaJ260KmW/eSqXigpbSdu8:Jg2nOV4fgBP1r5/eSQr8du8

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • Modiloader family

    • ModiLoader Second Stage

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.