Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_5feb559ece12fa1508873bf531112884

  • Size

    204KB

  • Sample

    250101-w33cesxlgt

  • MD5

    5feb559ece12fa1508873bf531112884

  • SHA1

    a20c4dfead844d5d433b0410e82f794aed2ab223

  • SHA256

    164f5d77e96208abd1a54db7d76297e5c219109f2502a9f3e1f15d46dfb2b157

  • SHA512

    0059cd5eefe852c878042f71e072a94f00f72cf8fc66af81db52b11e956f880060ec63f55c535ec30578528aeeddea762138239bd66bf3bfa221c103e1568b47

  • SSDEEP

    3072:3Hjk+0oLnWFnzBHv/xWFsg8WatFBGFVWPE5ac0pG/1z+QVMbg1:Xo/BHng5HaVG4G/1z+QVMbg1

Malware Config

Targets

    • Target

      JaffaCakes118_5feb559ece12fa1508873bf531112884

    • Size

      204KB

    • MD5

      5feb559ece12fa1508873bf531112884

    • SHA1

      a20c4dfead844d5d433b0410e82f794aed2ab223

    • SHA256

      164f5d77e96208abd1a54db7d76297e5c219109f2502a9f3e1f15d46dfb2b157

    • SHA512

      0059cd5eefe852c878042f71e072a94f00f72cf8fc66af81db52b11e956f880060ec63f55c535ec30578528aeeddea762138239bd66bf3bfa221c103e1568b47

    • SSDEEP

      3072:3Hjk+0oLnWFnzBHv/xWFsg8WatFBGFVWPE5ac0pG/1z+QVMbg1:Xo/BHng5HaVG4G/1z+QVMbg1

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

    • Vobfus family

    • Adds policy Run key to start application

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks