Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

fec121c485...18.exe

windows7-x64

7

fec121c485...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fec121c485383810ffc03b9c20ee6d79_JaffaCakes118

  • Size

    506KB

  • Sample

    240421-h73bbsea67

  • MD5

    fec121c485383810ffc03b9c20ee6d79

  • SHA1

    941a09b0d54c60565e600484ca165788b7a20d8a

  • SHA256

    633da75617d3138d9574e8ea51d2dfc1c9128459513cc639069c2cff18a97d49

  • SHA512

    bdc6c1efc745fe5c6efd8b4c08c0dee159ad19bcd6b329aea4c677f8a82246a7f58cb75aea7be2f8a2939d0d8bee30bf2db5e6b6aa8f51b1a1defb9230ae1b78

  • SSDEEP

    12288:NIUSnnX7K5GI73Yn5jO9YeazpUy4kY/2LJ4RCeHiG9:NIdnrWG0YjO9YeqJOCGiG9

Score
7/10

Malware Config

Targets

    • Target

      fec121c485383810ffc03b9c20ee6d79_JaffaCakes118

    • Size

      506KB

    • MD5

      fec121c485383810ffc03b9c20ee6d79

    • SHA1

      941a09b0d54c60565e600484ca165788b7a20d8a

    • SHA256

      633da75617d3138d9574e8ea51d2dfc1c9128459513cc639069c2cff18a97d49

    • SHA512

      bdc6c1efc745fe5c6efd8b4c08c0dee159ad19bcd6b329aea4c677f8a82246a7f58cb75aea7be2f8a2939d0d8bee30bf2db5e6b6aa8f51b1a1defb9230ae1b78

    • SSDEEP

      12288:NIUSnnX7K5GI73Yn5jO9YeazpUy4kY/2LJ4RCeHiG9:NIdnrWG0YjO9YeqJOCGiG9

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks