Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_abd40c9852299e858e7dbf5662becb74

  • Size

    95KB

  • Sample

    250118-relmjsvnf1

  • MD5

    abd40c9852299e858e7dbf5662becb74

  • SHA1

    039e1150807b28f9dfc028dc420609df76902366

  • SHA256

    19aa85ffab10158b8c5a3ebeb19d7e588bed8437b72b2e477a5a7bc53ec69920

  • SHA512

    496c2a4860b209f71ca4db7ccf91d9dc9e76c60277f50207ef562a068de17cc4bdf9a8040fc8e325519b428544342579c8ee0cde1552d98810a15b8747deab27

  • SSDEEP

    768:E06R0UKzOgnKqGR7//GPc0LOBhvBrHks3IiyhDYQbGmxlNaM+WGa1wuxnzgOYw9Y:6R0vxn3Pc0LCH9MtbvabUDzJYWu3B

Malware Config

Targets

    • Target

      JaffaCakes118_abd40c9852299e858e7dbf5662becb74

    • Size

      95KB

    • MD5

      abd40c9852299e858e7dbf5662becb74

    • SHA1

      039e1150807b28f9dfc028dc420609df76902366

    • SHA256

      19aa85ffab10158b8c5a3ebeb19d7e588bed8437b72b2e477a5a7bc53ec69920

    • SHA512

      496c2a4860b209f71ca4db7ccf91d9dc9e76c60277f50207ef562a068de17cc4bdf9a8040fc8e325519b428544342579c8ee0cde1552d98810a15b8747deab27

    • SSDEEP

      768:E06R0UKzOgnKqGR7//GPc0LOBhvBrHks3IiyhDYQbGmxlNaM+WGa1wuxnzgOYw9Y:6R0vxn3Pc0LCH9MtbvabUDzJYWu3B

    • Modifies WinLogon for persistence

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Ramnit family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks