Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

f215c8813b...18.exe

windows7-x64

7

f215c8813b...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f215c8813bf453f08b9231feff9d5f9e_JaffaCakes118

  • Size

    506KB

  • Sample

    240415-2j6hmacc3z

  • MD5

    f215c8813bf453f08b9231feff9d5f9e

  • SHA1

    2c330cfc6acd062cd07764f8cf16230584a58a11

  • SHA256

    b3840c4a0059c3c20aed1f58da814c695bd08d9c7d5207a7553a341f7e02b1b5

  • SHA512

    fa15ee33f25aef78f841914ab52681aae7b9c6fe4c8fc68b47ce98541383122be07b9c1e2ad6c3a1667247c05141af1dbebc6caccdaffc4d62585838c5622a81

  • SSDEEP

    12288:Ep+rfmK5RgmuWPOXbUjtsm3AFsMMU8oxQLxCAPq:tLmK5RglIOgjFwdMU12LxVy

Score
7/10

Malware Config

Targets

    • Target

      f215c8813bf453f08b9231feff9d5f9e_JaffaCakes118

    • Size

      506KB

    • MD5

      f215c8813bf453f08b9231feff9d5f9e

    • SHA1

      2c330cfc6acd062cd07764f8cf16230584a58a11

    • SHA256

      b3840c4a0059c3c20aed1f58da814c695bd08d9c7d5207a7553a341f7e02b1b5

    • SHA512

      fa15ee33f25aef78f841914ab52681aae7b9c6fe4c8fc68b47ce98541383122be07b9c1e2ad6c3a1667247c05141af1dbebc6caccdaffc4d62585838c5622a81

    • SSDEEP

      12288:Ep+rfmK5RgmuWPOXbUjtsm3AFsMMU8oxQLxCAPq:tLmK5RglIOgjFwdMU12LxVy

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks