Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_77a2fd820c2ac4a7f3955e5d8d7b3c88

  • Size

    199KB

  • Sample

    250315-x1l34avlv4

  • MD5

    77a2fd820c2ac4a7f3955e5d8d7b3c88

  • SHA1

    67fc2285c6972116f9fd953386dc86696f62e979

  • SHA256

    c87cdd1901bf7a4cd0caff33b380962d9d7848e6964cff3cbfe1565658eccc6d

  • SHA512

    fdcb0c59c848f46643d83595acaff80aaec7e2ddc90dbf3eb8b5fd2139207a2adf74bc8e30b2f6809df83a6921d0746c0a913f0edc520d3035caa61614887ad7

  • SSDEEP

    3072:bSnpywl9Nv3c49nSMhMwM00usnxWbVRCWJdsnZMt9eGk:boywl9Nor0OF9

Malware Config

Targets

    • Target

      JaffaCakes118_77a2fd820c2ac4a7f3955e5d8d7b3c88

    • Size

      199KB

    • MD5

      77a2fd820c2ac4a7f3955e5d8d7b3c88

    • SHA1

      67fc2285c6972116f9fd953386dc86696f62e979

    • SHA256

      c87cdd1901bf7a4cd0caff33b380962d9d7848e6964cff3cbfe1565658eccc6d

    • SHA512

      fdcb0c59c848f46643d83595acaff80aaec7e2ddc90dbf3eb8b5fd2139207a2adf74bc8e30b2f6809df83a6921d0746c0a913f0edc520d3035caa61614887ad7

    • SSDEEP

      3072:bSnpywl9Nv3c49nSMhMwM00usnxWbVRCWJdsnZMt9eGk:boywl9Nor0OF9

    • Detected google phishing page

    • A potential corporate email address has been identified in the URL: [email protected]

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks