Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

fa2aebbd93...18.exe

windows7-x64

10

fa2aebbd93...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa2aebbd93f06f2ffcef3454635004dd_JaffaCakes118

  • Size

    231KB

  • Sample

    240419-m8jmtsba8t

  • MD5

    fa2aebbd93f06f2ffcef3454635004dd

  • SHA1

    60d9d9827c6906e649d4712fb37ecd0477f734e6

  • SHA256

    d244a9eb4265002ee984ef5da603f43a1f30df8d463b02c19b5bad9eef9469a6

  • SHA512

    8edbcaf50445d409a7517f7578841871c2b5d94421d3666845070c5c2b4b33f3319e98d2eb2f034f2723b89f54943461dc1b7d8ea5376ed149de556be93eef66

  • SSDEEP

    6144:cDV3tsVHUOIqTB4cpLlgq6CY3ElWnvAPz8:I3qcqTBtgqNUhvyz

Score
10/10
aspackv2evasionpersistence

Malware Config

Targets

    • Target

      fa2aebbd93f06f2ffcef3454635004dd_JaffaCakes118

    • Size

      231KB

    • MD5

      fa2aebbd93f06f2ffcef3454635004dd

    • SHA1

      60d9d9827c6906e649d4712fb37ecd0477f734e6

    • SHA256

      d244a9eb4265002ee984ef5da603f43a1f30df8d463b02c19b5bad9eef9469a6

    • SHA512

      8edbcaf50445d409a7517f7578841871c2b5d94421d3666845070c5c2b4b33f3319e98d2eb2f034f2723b89f54943461dc1b7d8ea5376ed149de556be93eef66

    • SSDEEP

      6144:cDV3tsVHUOIqTB4cpLlgq6CY3ElWnvAPz8:I3qcqTBtgqNUhvyz

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Disables Task Manager via registry modification

      evasion

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks