Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_7e290b3489400c6e501962cdbbdcdea9

  • Size

    632KB

  • Sample

    250317-qajrqatmx5

  • MD5

    7e290b3489400c6e501962cdbbdcdea9

  • SHA1

    d338e6f06d482d6486a113d4115c90b531c088dd

  • SHA256

    aec7476b3cc5d23fc8f8652a6255bf652cc03fd985b6de9faa1875103e12bd4d

  • SHA512

    70fe2292609d6db16b99a28593e1a2c98af3847fb7d57ef64b6ac4b26572361b7b870a1f3f5316e768b740cd5dbff230e5eda91cb2d0beb87ba13afa69afff4e

  • SSDEEP

    12288:7yt+isUdgcRFOvNs534CqdqZfHSVl3fe:7TVUdgcRYaOSyVNf

Malware Config

Targets

    • Target

      JaffaCakes118_7e290b3489400c6e501962cdbbdcdea9

    • Size

      632KB

    • MD5

      7e290b3489400c6e501962cdbbdcdea9

    • SHA1

      d338e6f06d482d6486a113d4115c90b531c088dd

    • SHA256

      aec7476b3cc5d23fc8f8652a6255bf652cc03fd985b6de9faa1875103e12bd4d

    • SHA512

      70fe2292609d6db16b99a28593e1a2c98af3847fb7d57ef64b6ac4b26572361b7b870a1f3f5316e768b740cd5dbff230e5eda91cb2d0beb87ba13afa69afff4e

    • SSDEEP

      12288:7yt+isUdgcRFOvNs534CqdqZfHSVl3fe:7TVUdgcRYaOSyVNf

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

    • ISR Stealer payload

    • Isrstealer family

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks