Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7

f8376d2197...18.exe

windows7-x64

8

f8376d2197...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f8376d2197dfb79b35c4b6ef6649e858_JaffaCakes118

  • Size

    5.1MB

  • Sample

    240418-r3w37aga28

  • MD5

    f8376d2197dfb79b35c4b6ef6649e858

  • SHA1

    de300b93701fd9d26a382dd0bff8ebda390f3001

  • SHA256

    943c6c60e2dbdfd988653557b179e1e01da1485907eb5be689c4a8d8f214f1e8

  • SHA512

    fc5cb381f3b3527e392ac4b75af47d789169feac3b1f60c0878d59ef91befed0c06a256db9b865a3dac5fd72c69d78a48ffb2795a737d82030a8f04b5c98bfc7

  • SSDEEP

    98304:Fi4bVlCVF9RAgbcowBg8EmX5LBdXjNIBNjoAYoetH:E4BlCVLRAgIoR8EStB6BTe

Score
8/10
evasionpersistencethemida

Malware Config

Targets

    • Target

      f8376d2197dfb79b35c4b6ef6649e858_JaffaCakes118

    • Size

      5.1MB

    • MD5

      f8376d2197dfb79b35c4b6ef6649e858

    • SHA1

      de300b93701fd9d26a382dd0bff8ebda390f3001

    • SHA256

      943c6c60e2dbdfd988653557b179e1e01da1485907eb5be689c4a8d8f214f1e8

    • SHA512

      fc5cb381f3b3527e392ac4b75af47d789169feac3b1f60c0878d59ef91befed0c06a256db9b865a3dac5fd72c69d78a48ffb2795a737d82030a8f04b5c98bfc7

    • SSDEEP

      98304:Fi4bVlCVF9RAgbcowBg8EmX5LBdXjNIBNjoAYoetH:E4BlCVLRAgIoR8EStB6BTe

    Score
    8/10
    evasionpersistencethemida

    • Stops running service(s)

      evasion

    • Uses Session Manager for persistence

      Creates Session Manager registry key to run executable early in system boot.

      persistence

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks