Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

ed41a8bd2a...18.exe

windows7-x64

10

ed41a8bd2a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ed41a8bd2aa3dfe7cd3faf3d2dc1b36d_JaffaCakes118

  • Size

    93KB

  • Sample

    240411-m1nltaaa43

  • MD5

    ed41a8bd2aa3dfe7cd3faf3d2dc1b36d

  • SHA1

    9fab6cf701e1f5c55f14cb54af31a7ba26cd04de

  • SHA256

    40fd5b6b608684192c9be7caea845e59b413b191744be405f50956ad17437ebe

  • SHA512

    84a5033b7c2c0089b81d66dc0d20741ade795af4e85647e5beef1e88f8cde5405af2f4a93f71fcfa73fa30c6c56c7cf839c9eff5caf64a86801ec9faddc6a59a

  • SSDEEP

    1536:SWFpaKwgjPw45CU9ubRpcz7FFd3CpuDOTnramH5d1rwNDmD9nv0M5dIQkwXt:BparUPvuRpmbdSADObGmH5Trt9sWdr

Score
10/10
persistence

Malware Config

Targets

    • Target

      ed41a8bd2aa3dfe7cd3faf3d2dc1b36d_JaffaCakes118

    • Size

      93KB

    • MD5

      ed41a8bd2aa3dfe7cd3faf3d2dc1b36d

    • SHA1

      9fab6cf701e1f5c55f14cb54af31a7ba26cd04de

    • SHA256

      40fd5b6b608684192c9be7caea845e59b413b191744be405f50956ad17437ebe

    • SHA512

      84a5033b7c2c0089b81d66dc0d20741ade795af4e85647e5beef1e88f8cde5405af2f4a93f71fcfa73fa30c6c56c7cf839c9eff5caf64a86801ec9faddc6a59a

    • SSDEEP

      1536:SWFpaKwgjPw45CU9ubRpcz7FFd3CpuDOTnramH5d1rwNDmD9nv0M5dIQkwXt:BparUPvuRpmbdSADObGmH5Trt9sWdr

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks