Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_5759041a8842e01a3aa7c7b9e03417ca

  • Size

    95KB

  • Sample

    250115-p1s8eavlal

  • MD5

    5759041a8842e01a3aa7c7b9e03417ca

  • SHA1

    d788f78a2faf4465a5acddeec323aceaa091ab9b

  • SHA256

    2d23e48229d6182ab13bfb158ec087c7c9997fe3135de941fb59151ebdc7e1e3

  • SHA512

    361d739162f189819770be45c59a1ab7dfa31c3dbe77a44d13ac4755fc5e1cdc97eeff00c2f09adf841f19d20db55143c1e762486a70c54098ed527f64da401f

  • SSDEEP

    768:A06R0UKzOgnKqGR7//GPc0LOBhvBrHks3IiyhDYQbGmxlNaM+WGa1wuxnzgOYw9Y:OR0vxn3Pc0LCH9MtbvabUDzJYWu3B

Malware Config

Targets

    • Target

      JaffaCakes118_5759041a8842e01a3aa7c7b9e03417ca

    • Size

      95KB

    • MD5

      5759041a8842e01a3aa7c7b9e03417ca

    • SHA1

      d788f78a2faf4465a5acddeec323aceaa091ab9b

    • SHA256

      2d23e48229d6182ab13bfb158ec087c7c9997fe3135de941fb59151ebdc7e1e3

    • SHA512

      361d739162f189819770be45c59a1ab7dfa31c3dbe77a44d13ac4755fc5e1cdc97eeff00c2f09adf841f19d20db55143c1e762486a70c54098ed527f64da401f

    • SSDEEP

      768:A06R0UKzOgnKqGR7//GPc0LOBhvBrHks3IiyhDYQbGmxlNaM+WGa1wuxnzgOYw9Y:OR0vxn3Pc0LCH9MtbvabUDzJYWu3B

    • Modifies WinLogon for persistence

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Ramnit family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks