Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

ecb5a5787b...18.exe

windows7-x64

7

ecb5a5787b...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ecb5a5787b35f0685de4d3015448d1c7_JaffaCakes118

  • Size

    1000KB

  • Sample

    240411-fj37lsga2z

  • MD5

    ecb5a5787b35f0685de4d3015448d1c7

  • SHA1

    ff76972807ca531e046999a351aff7407fbd6db7

  • SHA256

    5541ea53bef94562eced11c2f12d65cc346df5c0ff144487414f9878bca54041

  • SHA512

    02a8676b66123b82cacf40bc8eb2e43bb050923548cc42cb89370b8052489d5f0c757c57842a477a35a49960b78bd26dd55924149a7824f8c3b85dc29ced5c2b

  • SSDEEP

    24576:I7/m2RlQVD5QKLvX4/1B+5vMiqt0gj2ed:oAVDTvIfqOL

Score
7/10

Malware Config

Targets

    • Target

      ecb5a5787b35f0685de4d3015448d1c7_JaffaCakes118

    • Size

      1000KB

    • MD5

      ecb5a5787b35f0685de4d3015448d1c7

    • SHA1

      ff76972807ca531e046999a351aff7407fbd6db7

    • SHA256

      5541ea53bef94562eced11c2f12d65cc346df5c0ff144487414f9878bca54041

    • SHA512

      02a8676b66123b82cacf40bc8eb2e43bb050923548cc42cb89370b8052489d5f0c757c57842a477a35a49960b78bd26dd55924149a7824f8c3b85dc29ced5c2b

    • SSDEEP

      24576:I7/m2RlQVD5QKLvX4/1B+5vMiqt0gj2ed:oAVDTvIfqOL

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks