Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_e26702ccef04257666a04cf2ba0af070

  • Size

    415KB

  • Sample

    250110-my4v1ssmcx

  • MD5

    e26702ccef04257666a04cf2ba0af070

  • SHA1

    479206ed455073dcb28b0735dc8c57d3e7b5ed41

  • SHA256

    70455d2c4e2de40fc7b2b389662827dafcd09c2594f7e9028bfbd15355dd52c6

  • SHA512

    870270dad7d12cc34a383c0dfe83d771d2d38a0d7425112ac14d1bd2c4637ecbd2630ff17b5f6b4086a4dc8f6d6fa96834f4c0f28bc8194cde4b9a4da4e3eeeb

  • SSDEEP

    6144:4YvqOYMZojpJA9P1Cx4AJZA6n8IeVHdlb5q5S3/:tvwMZ+A9Pi4YNeVHdlQE3/

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

kpbe

Decoy

zlhjx.com

night.solutions

atasteofcal.com

hariommobile.com

bunkerexotics.com

beritaindo.online

nguoidao.online

grenaliacikinihotel.xyz

danielfehrle.com

bitracks56.com

qubitsolana.com

klw1.com

imprimiruncalendario.com

fightfigures.com

kwkteam.com

roofingcaulk.com

nibawei.com

jeju-led.com

claridadoftalmo.net

angeltaxi.net

Targets

    • Target

      JaffaCakes118_e26702ccef04257666a04cf2ba0af070

    • Size

      415KB

    • MD5

      e26702ccef04257666a04cf2ba0af070

    • SHA1

      479206ed455073dcb28b0735dc8c57d3e7b5ed41

    • SHA256

      70455d2c4e2de40fc7b2b389662827dafcd09c2594f7e9028bfbd15355dd52c6

    • SHA512

      870270dad7d12cc34a383c0dfe83d771d2d38a0d7425112ac14d1bd2c4637ecbd2630ff17b5f6b4086a4dc8f6d6fa96834f4c0f28bc8194cde4b9a4da4e3eeeb

    • SSDEEP

      6144:4YvqOYMZojpJA9P1Cx4AJZA6n8IeVHdlb5q5S3/:tvwMZ+A9Pi4YNeVHdlQE3/

MITRE ATT&CK Enterprise v15

Tasks