Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

0319f4a199...18.exe

windows7-x64

1

0319f4a199...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0319f4a199d00562e1e2458c01deef1a_JaffaCakes118

  • Size

    76KB

  • Sample

    240328-md1b4agb24

  • MD5

    0319f4a199d00562e1e2458c01deef1a

  • SHA1

    07be3534eb0d269d1d0ee2addd711e03d5f8bb39

  • SHA256

    d85bd4d06c7b84f22980e36da1b11a18f66b1bf63579ac0dc6769ea422293d8b

  • SHA512

    9b65ed8be9481359dd41a15fa32870b88b7a1131b2aaf9919d5e3e634cc0c7177907cde624c9a28d49404f43d435ea742cfbda1804f55768680ca69086f97d52

  • SSDEEP

    768:1FGPbKIflMdYYLqsouZFRELqFlhFM/aCKdN27fx0Xn6YOD5ryTUu:1QPb3aL2uZFxlD8K727fxi6Ycu

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0319f4a199d00562e1e2458c01deef1a_JaffaCakes118

    • Size

      76KB

    • MD5

      0319f4a199d00562e1e2458c01deef1a

    • SHA1

      07be3534eb0d269d1d0ee2addd711e03d5f8bb39

    • SHA256

      d85bd4d06c7b84f22980e36da1b11a18f66b1bf63579ac0dc6769ea422293d8b

    • SHA512

      9b65ed8be9481359dd41a15fa32870b88b7a1131b2aaf9919d5e3e634cc0c7177907cde624c9a28d49404f43d435ea742cfbda1804f55768680ca69086f97d52

    • SSDEEP

      768:1FGPbKIflMdYYLqsouZFRELqFlhFM/aCKdN27fx0Xn6YOD5ryTUu:1QPb3aL2uZFxlD8K727fxi6Ycu

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks