Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_093db49405906e907d238603de60252c

  • Size

    873KB

  • Sample

    250220-dgjn3svneq

  • MD5

    093db49405906e907d238603de60252c

  • SHA1

    53338db63b54f6af6bc4d53754b2ee8724fcab9d

  • SHA256

    9b21ffacea2d7b7bdf90a258e2bb25943be6aa384348f0025bf25920dc7c4ef7

  • SHA512

    7a314e809b171fb3317dda3760009062ddb2e40a612f2d8473bf261a2a1643e6803a6ff5a996ea5c8290948bcd597ceb62244bcd8c292679d3d5472c802fa6e0

  • SSDEEP

    24576:tthEVaPqL4ME+Oxe3XzUDk5paf+MMj8duq:VEVUc4MErmXg4YMS

Malware Config

Targets

    • Target

      JaffaCakes118_093db49405906e907d238603de60252c

    • Size

      873KB

    • MD5

      093db49405906e907d238603de60252c

    • SHA1

      53338db63b54f6af6bc4d53754b2ee8724fcab9d

    • SHA256

      9b21ffacea2d7b7bdf90a258e2bb25943be6aa384348f0025bf25920dc7c4ef7

    • SHA512

      7a314e809b171fb3317dda3760009062ddb2e40a612f2d8473bf261a2a1643e6803a6ff5a996ea5c8290948bcd597ceb62244bcd8c292679d3d5472c802fa6e0

    • SSDEEP

      24576:tthEVaPqL4ME+Oxe3XzUDk5paf+MMj8duq:VEVUc4MErmXg4YMS

    • Blackshades

      Blackshades is a remote access trojan with various capabilities.

    • Blackshades family

    • Blackshades payload

    • Modifies firewall policy service

    • Adds Run key to start application

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks