Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_9f89e67886b297b65a1c6797dd96357e

  • Size

    1.1MB

  • Sample

    250205-pgkf6awkgt

  • MD5

    9f89e67886b297b65a1c6797dd96357e

  • SHA1

    ac11ea001d1ebbd301fcce384c33ed311144618b

  • SHA256

    5aec1415a418c99f8d743f3a6376d344823b12b156c738abd302c8c922c48a84

  • SHA512

    758f75f2fba3957fa5eba936996f9b216b433e1283cd853df90a9d95f61b8b78f77d8cd3ad24ea5d9ff717ef004c9e56749c3e2eacc891dce10b8a4b4671d397

  • SSDEEP

    24576:RwXc+Kghx6Fi0QeVVGhfHH9kAZ6Ipa67pnb6Km8:Rwschx6Fi05VqfnuAZ6IpLNeKn

Malware Config

Targets

    • Target

      JaffaCakes118_9f89e67886b297b65a1c6797dd96357e

    • Size

      1.1MB

    • MD5

      9f89e67886b297b65a1c6797dd96357e

    • SHA1

      ac11ea001d1ebbd301fcce384c33ed311144618b

    • SHA256

      5aec1415a418c99f8d743f3a6376d344823b12b156c738abd302c8c922c48a84

    • SHA512

      758f75f2fba3957fa5eba936996f9b216b433e1283cd853df90a9d95f61b8b78f77d8cd3ad24ea5d9ff717ef004c9e56749c3e2eacc891dce10b8a4b4671d397

    • SSDEEP

      24576:RwXc+Kghx6Fi0QeVVGhfHH9kAZ6Ipa67pnb6Km8:Rwschx6Fi05VqfnuAZ6IpLNeKn

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks