Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

fa325461d6...18.exe

windows7-x64

10

fa325461d6...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa325461d6d806334e04129e09cfbff4_JaffaCakes118

  • Size

    244KB

  • Sample

    240419-nj3vvaad66

  • MD5

    fa325461d6d806334e04129e09cfbff4

  • SHA1

    ed18bb158cb42bb1834c97fb217d45ac949997a2

  • SHA256

    3d6ae7ee68a0a0743a4c0882ed9a69e74bb35b4c5fbb1f344ceab5c6329e8b8e

  • SHA512

    93385ce18f03b8fd1176d4772d0dda18911b6edc16cc63fbeef27d0463803578e8eacde10f522708434d6039a8b227cb6e3b88df4d24a303ca3f7b2c1f68b957

  • SSDEEP

    768:1lvMaLiJvypwbjMPkG1VuW/wqvRXMXp677yCzdXZRT2Nq1MaQnepMri14PGBEj6m:1Rl+Ja+lGVs4emEFbsP0

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      fa325461d6d806334e04129e09cfbff4_JaffaCakes118

    • Size

      244KB

    • MD5

      fa325461d6d806334e04129e09cfbff4

    • SHA1

      ed18bb158cb42bb1834c97fb217d45ac949997a2

    • SHA256

      3d6ae7ee68a0a0743a4c0882ed9a69e74bb35b4c5fbb1f344ceab5c6329e8b8e

    • SHA512

      93385ce18f03b8fd1176d4772d0dda18911b6edc16cc63fbeef27d0463803578e8eacde10f522708434d6039a8b227cb6e3b88df4d24a303ca3f7b2c1f68b957

    • SSDEEP

      768:1lvMaLiJvypwbjMPkG1VuW/wqvRXMXp677yCzdXZRT2Nq1MaQnepMri14PGBEj6m:1Rl+Ja+lGVs4emEFbsP0

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks