Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

076fbb0bd7...18.exe

windows7-x64

10

076fbb0bd7...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    076fbb0bd7cb7687e5bfd8d2a83f3051_JaffaCakes118

  • Size

    691KB

  • Sample

    240429-mfrgzagg3s

  • MD5

    076fbb0bd7cb7687e5bfd8d2a83f3051

  • SHA1

    02cfc4e4c5f339eb1b992caa94264e678b98870b

  • SHA256

    b61c0ab5a7460fe73e2b4d1fadd11416bcc2b80738bb8d57f48d77aa38e240fa

  • SHA512

    8ca4ecbce790e82e4c9db4e8c2cb2902e5bbf1af89a3304157b3316dedbcba768d0662d0f83f24c6973cb689ff7690d4ad3517fb8bbe06a156c0cf89bb2ddd5b

  • SSDEEP

    6144:UZfec9EbXDk6Rk8KWnmy+g4yuHOFnmy+g4Snmy+g4g/UOPSe570Szp3oRQJ/oMrk:UZWtI6RkgGOFFUOB0ts/oYut

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      076fbb0bd7cb7687e5bfd8d2a83f3051_JaffaCakes118

    • Size

      691KB

    • MD5

      076fbb0bd7cb7687e5bfd8d2a83f3051

    • SHA1

      02cfc4e4c5f339eb1b992caa94264e678b98870b

    • SHA256

      b61c0ab5a7460fe73e2b4d1fadd11416bcc2b80738bb8d57f48d77aa38e240fa

    • SHA512

      8ca4ecbce790e82e4c9db4e8c2cb2902e5bbf1af89a3304157b3316dedbcba768d0662d0f83f24c6973cb689ff7690d4ad3517fb8bbe06a156c0cf89bb2ddd5b

    • SSDEEP

      6144:UZfec9EbXDk6Rk8KWnmy+g4yuHOFnmy+g4Snmy+g4g/UOPSe570Szp3oRQJ/oMrk:UZWtI6RkgGOFFUOB0ts/oYut

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks