Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...40.exe

windows7-x64

10

JaffaCakes...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_36532bd11cfa323c79a3b3d455788e40

  • Size

    208KB

  • Sample

    250301-dmf55symy2

  • MD5

    36532bd11cfa323c79a3b3d455788e40

  • SHA1

    49a2b1b817a0a6d8f281d0716c2b4322289d3460

  • SHA256

    30b05b5f0efd6d5e71fde66fb9d360470a880ac04003b5665796aa3d0bac5d2a

  • SHA512

    5a78a7f38a97fbd64f9ef2b7fc40e38bf4b267eb72a5c2ca83414365d38a8886a0ac93db96ca0bed6f8f70c60f9e95bfc0fab18c54ec13eff422e43638863176

  • SSDEEP

    6144:V3bdXPx3KdIKCC0ef//uXltKc+LVsz9b8:BKdFeCXuLKcCVsz6

Score
10/10
isrstealerdiscoveryspywarestealertrojanupx

Malware Config

Targets

    • Target

      JaffaCakes118_36532bd11cfa323c79a3b3d455788e40

    • Size

      208KB

    • MD5

      36532bd11cfa323c79a3b3d455788e40

    • SHA1

      49a2b1b817a0a6d8f281d0716c2b4322289d3460

    • SHA256

      30b05b5f0efd6d5e71fde66fb9d360470a880ac04003b5665796aa3d0bac5d2a

    • SHA512

      5a78a7f38a97fbd64f9ef2b7fc40e38bf4b267eb72a5c2ca83414365d38a8886a0ac93db96ca0bed6f8f70c60f9e95bfc0fab18c54ec13eff422e43638863176

    • SSDEEP

      6144:V3bdXPx3KdIKCC0ef//uXltKc+LVsz9b8:BKdFeCXuLKcCVsz6

    Score
    10/10
    isrstealerdiscoveryspywarestealertrojanupx

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • Isrstealer family

      isrstealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks