Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

c08b8818e0...18.exe

windows7-x64

7

c08b8818e0...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c08b8818e0f884170d03efe476315c6d_JaffaCakes118

  • Size

    15.9MB

  • Sample

    240404-xzdekafg6t

  • MD5

    c08b8818e0f884170d03efe476315c6d

  • SHA1

    d7d980427342d00cab78b6c56b0fb20d1d359d0a

  • SHA256

    72a5c13ea2529238f39e86a718473d7d89ebbf78b781fbf2ac55ce9ded09cd0d

  • SHA512

    6fad815f044c39b23376ae9646d8ef89ffb9ccc6e1e8d4c882ab493e3bd60d2461e588ff84d7cbb017ff9bc426c137557add37b5f0614498cd5882b37b3d73d1

  • SSDEEP

    393216:Tg7upg7upg7upg7upg7upg7upg7upg7uN:USqSqSqSqSqSqSqSN

Score
7/10
persistence

Malware Config

Targets

    • Target

      c08b8818e0f884170d03efe476315c6d_JaffaCakes118

    • Size

      15.9MB

    • MD5

      c08b8818e0f884170d03efe476315c6d

    • SHA1

      d7d980427342d00cab78b6c56b0fb20d1d359d0a

    • SHA256

      72a5c13ea2529238f39e86a718473d7d89ebbf78b781fbf2ac55ce9ded09cd0d

    • SHA512

      6fad815f044c39b23376ae9646d8ef89ffb9ccc6e1e8d4c882ab493e3bd60d2461e588ff84d7cbb017ff9bc426c137557add37b5f0614498cd5882b37b3d73d1

    • SSDEEP

      393216:Tg7upg7upg7upg7upg7upg7upg7upg7uN:USqSqSqSqSqSqSqSN

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks