Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

09b9978fde...18.exe

windows7-x64

10

09b9978fde...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    09b9978fde254c1d97492edd3bc8dcaf_JaffaCakes118

  • Size

    2.5MB

  • Sample

    240430-n191gsbf8v

  • MD5

    09b9978fde254c1d97492edd3bc8dcaf

  • SHA1

    9b6cdf78911a865f9fa19708f110ee8617b4fc06

  • SHA256

    a16987d502f2844d5fa27021c9b5a4b1496598d05ad46fb199f88791ffb605c3

  • SHA512

    94cbb9369084bac12c52b3cbd474597fb0b5707609bf22b1a4cd5b0f4c17ed31e6b006b7598a12a47f22ee2f9cc1d69ced12d22d7dd808f89c0d916a8ac3a5de

  • SSDEEP

    24576:UuhaLZyOXeZJ8NI8+ZyOXeZJ8NI8+ZyOXeZJ8NI8+ZyOXeZJ8NI8+ZyOXeZJ8NIG:b2W8+W8+W8+W8+W8+W8FM

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      09b9978fde254c1d97492edd3bc8dcaf_JaffaCakes118

    • Size

      2.5MB

    • MD5

      09b9978fde254c1d97492edd3bc8dcaf

    • SHA1

      9b6cdf78911a865f9fa19708f110ee8617b4fc06

    • SHA256

      a16987d502f2844d5fa27021c9b5a4b1496598d05ad46fb199f88791ffb605c3

    • SHA512

      94cbb9369084bac12c52b3cbd474597fb0b5707609bf22b1a4cd5b0f4c17ed31e6b006b7598a12a47f22ee2f9cc1d69ced12d22d7dd808f89c0d916a8ac3a5de

    • SSDEEP

      24576:UuhaLZyOXeZJ8NI8+ZyOXeZJ8NI8+ZyOXeZJ8NI8+ZyOXeZJ8NI8+ZyOXeZJ8NIG:b2W8+W8+W8+W8+W8+W8FM

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks