Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

f560bd10a1...18.exe

windows7-x64

1

f560bd10a1...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f560bd10a1d8dce1a0c65d3c4ca728ea_JaffaCakes118

  • Size

    351KB

  • Sample

    240417-z5a8haec89

  • MD5

    f560bd10a1d8dce1a0c65d3c4ca728ea

  • SHA1

    9521377f6df44705e0732759967d97c24d2936c5

  • SHA256

    4e4eb36ffc85d36e3b6a5e820e20157e575bc4f2d9790b58ec4c614954cf9bea

  • SHA512

    375cd11eb9a05d69d5791f9479cf556cf208ee64b1514c50602f65b79f023ea4bba1111110007b36115ddb5282c63375f4e5cd07e82ee239b1430aafe5df206e

  • SSDEEP

    6144:tAFm5ovkVwJTBwKqRH18Ro29Rdm/ItQ6Xpgq/LsfO4qeT:6Fm5o8wJd9QonRg/IC6Xpf+p

Score
8/10
persistence

Malware Config

Targets

    • Target

      f560bd10a1d8dce1a0c65d3c4ca728ea_JaffaCakes118

    • Size

      351KB

    • MD5

      f560bd10a1d8dce1a0c65d3c4ca728ea

    • SHA1

      9521377f6df44705e0732759967d97c24d2936c5

    • SHA256

      4e4eb36ffc85d36e3b6a5e820e20157e575bc4f2d9790b58ec4c614954cf9bea

    • SHA512

      375cd11eb9a05d69d5791f9479cf556cf208ee64b1514c50602f65b79f023ea4bba1111110007b36115ddb5282c63375f4e5cd07e82ee239b1430aafe5df206e

    • SSDEEP

      6144:tAFm5ovkVwJTBwKqRH18Ro29Rdm/ItQ6Xpgq/LsfO4qeT:6Fm5o8wJd9QonRg/IC6Xpf+p

    Score
    8/10
    persistence

    • Sets DLL path for service in the registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks