Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_cc392c94ddba2c4417bb12637b3cd18c

  • Size

    204KB

  • Sample

    250109-tbwdpatmfs

  • MD5

    cc392c94ddba2c4417bb12637b3cd18c

  • SHA1

    0b8d888f7ac0fb4a5e6c13fcfda0519a29213022

  • SHA256

    9bdeb6e89d24c17de80309aa7287b09a81e57b48282fb1f9c8a1c3795cd281aa

  • SHA512

    b787a05e74ec6b1cef12a2bc86f2c0cd02d30626adcfb379d25aa1538093491d6f9780300002b32a38f5eb0f0a58a3b291468998f577f01e59781bf395446448

  • SSDEEP

    3072:3Hjk+0oLnWFnzBHv/xWFsg8WatFBGFVWPE5ac0pG/1z+QVMbg1:Xo/BHng5HaVG4G/1z+QVMbg1

Malware Config

Targets

    • Target

      JaffaCakes118_cc392c94ddba2c4417bb12637b3cd18c

    • Size

      204KB

    • MD5

      cc392c94ddba2c4417bb12637b3cd18c

    • SHA1

      0b8d888f7ac0fb4a5e6c13fcfda0519a29213022

    • SHA256

      9bdeb6e89d24c17de80309aa7287b09a81e57b48282fb1f9c8a1c3795cd281aa

    • SHA512

      b787a05e74ec6b1cef12a2bc86f2c0cd02d30626adcfb379d25aa1538093491d6f9780300002b32a38f5eb0f0a58a3b291468998f577f01e59781bf395446448

    • SSDEEP

      3072:3Hjk+0oLnWFnzBHv/xWFsg8WatFBGFVWPE5ac0pG/1z+QVMbg1:Xo/BHng5HaVG4G/1z+QVMbg1

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

    • Vobfus family

    • Adds policy Run key to start application

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks