Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f9a87b4081bb66670257d4315cee9cd7_JaffaCakes118

  • Size

    57KB

  • Sample

    241218-cekmxsxngz

  • MD5

    f9a87b4081bb66670257d4315cee9cd7

  • SHA1

    7bc661a739927e5751cd85f7055b43a3d162f837

  • SHA256

    a8b080c7407037e07946498abeec8046fe6296255b87c76d292eec7439f31aa7

  • SHA512

    9b45848c4e3e0a07eb2240e90e37bda35a52ea05a6b8cb6c34f5c640cda3cf3f70bd51c4f493df49786970033572e610e8401855774fcc8af998d74b469cb3ab

  • SSDEEP

    768:zYdI0kc7Lsy1lH3FXll6yOdCYfkFYDG4rcor4JDDSVIr0ihR:kyi7LD15VleCYcoQorwDDS1ih

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Targets

    • Target

      f9a87b4081bb66670257d4315cee9cd7_JaffaCakes118

    • Size

      57KB

    • MD5

      f9a87b4081bb66670257d4315cee9cd7

    • SHA1

      7bc661a739927e5751cd85f7055b43a3d162f837

    • SHA256

      a8b080c7407037e07946498abeec8046fe6296255b87c76d292eec7439f31aa7

    • SHA512

      9b45848c4e3e0a07eb2240e90e37bda35a52ea05a6b8cb6c34f5c640cda3cf3f70bd51c4f493df49786970033572e610e8401855774fcc8af998d74b469cb3ab

    • SSDEEP

      768:zYdI0kc7Lsy1lH3FXll6yOdCYfkFYDG4rcor4JDDSVIr0ihR:kyi7LD15VleCYcoQorwDDS1ih

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

    • Adds policy Run key to start application

    • Executes dropped EXE

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks