Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

f71d4d6864...18.exe

windows7-x64

3

f71d4d6864...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f71d4d6864c51f508020ae23199edc09_JaffaCakes118

  • Size

    38KB

  • Sample

    240418-dgby8sad6s

  • MD5

    f71d4d6864c51f508020ae23199edc09

  • SHA1

    a243989c774dc8daf12c38dde04865ab1fe68736

  • SHA256

    70c16904e1e54170c92d3e5b5e5d37091a7dd2a0cd5a1dbf30f25c97833a70cc

  • SHA512

    c4d3176487b2ca8a626d296f2955b7d6e5ae96f94ed9dd5c9af9d7f3e2febf624991873f35133ddc8ac3efe6a3ac56af97750c5f0a545b75c5a15009f8db7e72

  • SSDEEP

    768:tq8NdnDo0qD+5O1MbTQpKJN/gNCzjDM8XjefNJlSN6WfJCQr4QhYuHOPP+:48TDo0c+O70JN/S38TeVTSN6ydr4tuuO

Score
7/10
persistence

Malware Config

Targets

    • Target

      f71d4d6864c51f508020ae23199edc09_JaffaCakes118

    • Size

      38KB

    • MD5

      f71d4d6864c51f508020ae23199edc09

    • SHA1

      a243989c774dc8daf12c38dde04865ab1fe68736

    • SHA256

      70c16904e1e54170c92d3e5b5e5d37091a7dd2a0cd5a1dbf30f25c97833a70cc

    • SHA512

      c4d3176487b2ca8a626d296f2955b7d6e5ae96f94ed9dd5c9af9d7f3e2febf624991873f35133ddc8ac3efe6a3ac56af97750c5f0a545b75c5a15009f8db7e72

    • SSDEEP

      768:tq8NdnDo0qD+5O1MbTQpKJN/gNCzjDM8XjefNJlSN6WfJCQr4QhYuHOPP+:48TDo0c+O70JN/S38TeVTSN6ydr4tuuO

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks