Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

eaf0b16d7b...18.exe

windows7-x64

10

eaf0b16d7b...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eaf0b16d7b5fa059bf4bc3338aa45d85_JaffaCakes118

  • Size

    239KB

  • Sample

    240410-ndkgbadf96

  • MD5

    eaf0b16d7b5fa059bf4bc3338aa45d85

  • SHA1

    1e98641e0f98d7e47a72461df9a90bc3755cb5ee

  • SHA256

    13acb2a0cfc213abdbb8f42ae25b2def0c11116aead93ac2cb75b2d965cbb682

  • SHA512

    6092fd178b0ca7d57889e31a432036b4b47619ab2f7d1c701dc68d7551aaa47f17e94314650640749971247ad913593179647e7a28e134fb653b98d68748312b

  • SSDEEP

    3072:R410tNnOvYL/XcPBsLBkIcyYpZ0OFGkw+ALtjHyN3yeW8Wf8NFldNnD7SXlDfRVW:u2nGQ/WeJcyCZzFXsqo8DSX9fRb

Score
10/10
persistence

Malware Config

Targets

    • Target

      eaf0b16d7b5fa059bf4bc3338aa45d85_JaffaCakes118

    • Size

      239KB

    • MD5

      eaf0b16d7b5fa059bf4bc3338aa45d85

    • SHA1

      1e98641e0f98d7e47a72461df9a90bc3755cb5ee

    • SHA256

      13acb2a0cfc213abdbb8f42ae25b2def0c11116aead93ac2cb75b2d965cbb682

    • SHA512

      6092fd178b0ca7d57889e31a432036b4b47619ab2f7d1c701dc68d7551aaa47f17e94314650640749971247ad913593179647e7a28e134fb653b98d68748312b

    • SSDEEP

      3072:R410tNnOvYL/XcPBsLBkIcyYpZ0OFGkw+ALtjHyN3yeW8Wf8NFldNnD7SXlDfRVW:u2nGQ/WeJcyCZzFXsqo8DSX9fRb

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks