Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

JaffaCakes...48.exe

windows7-x64

10

JaffaCakes...48.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_15299695bf6c296ceef921b34154f148

  • Size

    204KB

  • Sample

    250106-hvn8yazkdz

  • MD5

    15299695bf6c296ceef921b34154f148

  • SHA1

    8a569f95211477d00e84452f75e5110284f86b48

  • SHA256

    2a79425e2eb1ce77d9769572b37fe291d71b334ec5bce6feb697740980c0c25c

  • SHA512

    393fbe577185c3b14990c7f117376234e3167fa417f8cec9dda97340514aa1350c664fbc3001fec296fc87750e303fff8b215c486c9a3415106313a8f5458005

  • SSDEEP

    3072:3Hjk+0oLnWFnzBHv/xWFsg8WatFBGFVWPE5ac0pG/1z+QVMbg1:Xo/BHng5HaVG4G/1z+QVMbg1

Score
10/10
vobfusdiscoverypersistenceworm

Malware Config

Targets

    • Target

      JaffaCakes118_15299695bf6c296ceef921b34154f148

    • Size

      204KB

    • MD5

      15299695bf6c296ceef921b34154f148

    • SHA1

      8a569f95211477d00e84452f75e5110284f86b48

    • SHA256

      2a79425e2eb1ce77d9769572b37fe291d71b334ec5bce6feb697740980c0c25c

    • SHA512

      393fbe577185c3b14990c7f117376234e3167fa417f8cec9dda97340514aa1350c664fbc3001fec296fc87750e303fff8b215c486c9a3415106313a8f5458005

    • SSDEEP

      3072:3Hjk+0oLnWFnzBHv/xWFsg8WatFBGFVWPE5ac0pG/1z+QVMbg1:Xo/BHng5HaVG4G/1z+QVMbg1

    Score
    10/10
    vobfusdiscoverypersistenceworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Vobfus family

      vobfus

    • Adds policy Run key to start application

      persistence

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks