Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7

fbcff06b38...18.exe

windows7-x64

8

fbcff06b38...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fbcff06b38e4ac7bcb904bdad1f9bdb9_JaffaCakes118

  • Size

    11KB

  • Sample

    240420-dvnvysfh5v

  • MD5

    fbcff06b38e4ac7bcb904bdad1f9bdb9

  • SHA1

    b4844e4398344a035507bb085353d8cce62739cd

  • SHA256

    f75b7535365c80c14523f074f5007fc6769e0453562d369362dff9c7e52874e5

  • SHA512

    29399e1558e4cffc128b38ba87d39d82184a971c4ab4baefc5ce452d9e03ce8f8515e9b41dc1038df65c11bbaec08200da42dfdc631820a1ea945b2ec4959a1d

  • SSDEEP

    192:S06iazzoKkrt/F53lGHuL3/E/GCizES4TN/o/04qcB6bdhSz46OXddIxa4sy6kp:S06ih3t/rgOL3/EZiw5o0AadUz46OXdg

Score
8/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      fbcff06b38e4ac7bcb904bdad1f9bdb9_JaffaCakes118

    • Size

      11KB

    • MD5

      fbcff06b38e4ac7bcb904bdad1f9bdb9

    • SHA1

      b4844e4398344a035507bb085353d8cce62739cd

    • SHA256

      f75b7535365c80c14523f074f5007fc6769e0453562d369362dff9c7e52874e5

    • SHA512

      29399e1558e4cffc128b38ba87d39d82184a971c4ab4baefc5ce452d9e03ce8f8515e9b41dc1038df65c11bbaec08200da42dfdc631820a1ea945b2ec4959a1d

    • SSDEEP

      192:S06iazzoKkrt/F53lGHuL3/E/GCizES4TN/o/04qcB6bdhSz46OXddIxa4sy6kp:S06ih3t/rgOL3/EZiw5o0AadUz46OXdg

    Score
    8/10
    persistencespywarestealerupx

    • Drops file in Drivers directory

    • Manipulates Digital Signatures

      Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

    • Modifies Installed Components in the registry

      persistence

    • Drops startup file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops desktop.ini file(s)

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks