Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_763549d68551a8ee370ac96c12d1d4d4

  • Size

    634KB

  • Sample

    250315-m4qkks11gv

  • MD5

    763549d68551a8ee370ac96c12d1d4d4

  • SHA1

    f27ff7309f03f94cc2b1391627bb63cb3ced7c33

  • SHA256

    3e75a2a33ace399905eda43769f5bd9bd6e5d5eb9c354c7afd52f6cb375b509f

  • SHA512

    59ed0bba1d8cdc6827cb9f88933458484ec8fd45420748070c0b80c79a4000c61abf4db8f90422b979ff91920f8a7a525c4e7e371a3069f8486380c72207bb35

  • SSDEEP

    12288:s1HLi0sFA65FPVvQuDB+sx81QRfXeICVF3Z4mxxX0MHoTAFbB:6NYtV4uDBpx81QRiQmXXKm

Malware Config

Targets

    • Target

      JaffaCakes118_763549d68551a8ee370ac96c12d1d4d4

    • Size

      634KB

    • MD5

      763549d68551a8ee370ac96c12d1d4d4

    • SHA1

      f27ff7309f03f94cc2b1391627bb63cb3ced7c33

    • SHA256

      3e75a2a33ace399905eda43769f5bd9bd6e5d5eb9c354c7afd52f6cb375b509f

    • SHA512

      59ed0bba1d8cdc6827cb9f88933458484ec8fd45420748070c0b80c79a4000c61abf4db8f90422b979ff91920f8a7a525c4e7e371a3069f8486380c72207bb35

    • SSDEEP

      12288:s1HLi0sFA65FPVvQuDB+sx81QRfXeICVF3Z4mxxX0MHoTAFbB:6NYtV4uDBpx81QRiQmXXKm

    • Detected google phishing page

    • Deletes itself

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks