Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

JaffaCakes...f9.dll

windows7-x64

7

JaffaCakes...f9.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_88604ad79ecb7f818bbcceba073e43f9

  • Size

    144KB

  • Sample

    250324-e4jg9sw1dv

  • MD5

    88604ad79ecb7f818bbcceba073e43f9

  • SHA1

    bb3ef6e04606f387829041fd6d20b5d5810504b3

  • SHA256

    e05bf49fd4bfeec4f8ea08eba1b62500e778ef47c63fdc156bd193c682a3c126

  • SHA512

    9aaa94dacafec669a24e98271c8f687beaeef88cdbcc5e9402fd011ac7caf055a3239b17e5463d2b21a7c9db1badf16e395185da545c4857a5d44e6ba80625c8

  • SSDEEP

    3072:aLFyLw4MDuCyfzKqrhtYuEL+sm7dVDGFyPtBD:EbafzoL+PdQyX

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_88604ad79ecb7f818bbcceba073e43f9

    • Size

      144KB

    • MD5

      88604ad79ecb7f818bbcceba073e43f9

    • SHA1

      bb3ef6e04606f387829041fd6d20b5d5810504b3

    • SHA256

      e05bf49fd4bfeec4f8ea08eba1b62500e778ef47c63fdc156bd193c682a3c126

    • SHA512

      9aaa94dacafec669a24e98271c8f687beaeef88cdbcc5e9402fd011ac7caf055a3239b17e5463d2b21a7c9db1badf16e395185da545c4857a5d44e6ba80625c8

    • SSDEEP

      3072:aLFyLw4MDuCyfzKqrhtYuEL+sm7dVDGFyPtBD:EbafzoL+PdQyX

    Score
    10/10
    discoveryramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks