Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_30a8292d8eff447b8becc26d5745c970

  • Size

    201KB

  • Sample

    250228-bga1tsxjw6

  • MD5

    30a8292d8eff447b8becc26d5745c970

  • SHA1

    22b22240e2b928c54bb3121673e307581359021d

  • SHA256

    1253974e8844a1eada1de7bc2131be7ff945f569454945dcf721353e0e17be49

  • SHA512

    5d6798becde6596bd15ea750b40a381bf52428d026f0d6d1cc193fe9f6f5aab9c085ad7e974043ab23ac9381fa65fcdd92d0c7eb1c2ab00088c524fc6701dfd0

  • SSDEEP

    6144:Hza2Nj+MLxwkcWTq/81DDiSTz9nqEja3TXU0xtF1:HqEjk7l7F1

Malware Config

Targets

    • Target

      JaffaCakes118_30a8292d8eff447b8becc26d5745c970

    • Size

      201KB

    • MD5

      30a8292d8eff447b8becc26d5745c970

    • SHA1

      22b22240e2b928c54bb3121673e307581359021d

    • SHA256

      1253974e8844a1eada1de7bc2131be7ff945f569454945dcf721353e0e17be49

    • SHA512

      5d6798becde6596bd15ea750b40a381bf52428d026f0d6d1cc193fe9f6f5aab9c085ad7e974043ab23ac9381fa65fcdd92d0c7eb1c2ab00088c524fc6701dfd0

    • SSDEEP

      6144:Hza2Nj+MLxwkcWTq/81DDiSTz9nqEja3TXU0xtF1:HqEjk7l7F1

    • Parallax family

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks