Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_500464ffcc8e1ad67ccf9422d1d60b17

  • Size

    306KB

  • Sample

    250305-cjxs2svybv

  • MD5

    500464ffcc8e1ad67ccf9422d1d60b17

  • SHA1

    752857b8dceffc1e7fd5e626b27445662a08beec

  • SHA256

    3a53eda9346ab154e6b4e6ed65dda380bef32eb0a42e28ef541cbd47ceb7a433

  • SHA512

    da9ac7ac0f424b84b195d09d2f552583866110058da692518327419bc419faa87f2207a72988aa0837fdc9eecb4bd59e8e19c98be5dd9d2f0ed572a19a219f9d

  • SSDEEP

    6144:cvUdSIJJXhy4dlUnxjWY/lLngffHKOH46bnVjeTtF:cvULJXhxUJYlHFbnVatF

Malware Config

Targets

    • Target

      JaffaCakes118_500464ffcc8e1ad67ccf9422d1d60b17

    • Size

      306KB

    • MD5

      500464ffcc8e1ad67ccf9422d1d60b17

    • SHA1

      752857b8dceffc1e7fd5e626b27445662a08beec

    • SHA256

      3a53eda9346ab154e6b4e6ed65dda380bef32eb0a42e28ef541cbd47ceb7a433

    • SHA512

      da9ac7ac0f424b84b195d09d2f552583866110058da692518327419bc419faa87f2207a72988aa0837fdc9eecb4bd59e8e19c98be5dd9d2f0ed572a19a219f9d

    • SSDEEP

      6144:cvUdSIJJXhy4dlUnxjWY/lLngffHKOH46bnVjeTtF:cvULJXhxUJYlHFbnVatF

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

    • ISR Stealer payload

    • Isrstealer family

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks