9a6748322029ca89ebb14592ca045af64100b1523408d2ab1cbeba367064a423 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

f4d4051357...18.exe

windows7-x64

7

f4d4051357...18.exe

windows10-2004-x64

7

Sharing

General

Target

f4d405135765456dc74052b85ebb5264_JaffaCakes118
Size

86KB
Sample

240417-cstgzscf5w
MD5

f4d405135765456dc74052b85ebb5264
SHA1

5c878e84fe84205de6992eb352f1640d72b655ab
SHA256

9a6748322029ca89ebb14592ca045af64100b1523408d2ab1cbeba367064a423
SHA512

db94e02bd440521efe37141ada59644b0543aee0a984e1939c7212f40708bedaeb092efeb4b57c9b356ff765d9d3f20fd57b30cbb028df163540ad246c8aab9f
SSDEEP

1536:pJOOmiYbPyOprqK5fJA+VRJgafBNyYxd+3xAm6mB:pvmPbPbNq2jVRJgsBjxQ9

Score

7^/10

persistence upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

f4d405135765456dc74052b85ebb5264_JaffaCakes118.exe

Resource

win7-20240221-en

persistence upx

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

f4d405135765456dc74052b85ebb5264_JaffaCakes118.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  
  f4d405135765456dc74052b85ebb5264_JaffaCakes118
- Size
  
  86KB
- MD5
  
  f4d405135765456dc74052b85ebb5264
- SHA1
  
  5c878e84fe84205de6992eb352f1640d72b655ab
- SHA256
  
  9a6748322029ca89ebb14592ca045af64100b1523408d2ab1cbeba367064a423
- SHA512
  
  db94e02bd440521efe37141ada59644b0543aee0a984e1939c7212f40708bedaeb092efeb4b57c9b356ff765d9d3f20fd57b30cbb028df163540ad246c8aab9f
- SSDEEP
  
  1536:pJOOmiYbPyOprqK5fJA+VRJgafBNyYxd+3xAm6mB:pvmPbPbNq2jVRJgsBjxQ9
Score

7^/10

persistence upx
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.