Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

1019aaaf21...18.exe

windows7-x64

10

1019aaaf21...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1019aaaf21eac6361cb61806c71a9c3f_JaffaCakes118

  • Size

    405KB

  • Sample

    240503-kjdn6sch59

  • MD5

    1019aaaf21eac6361cb61806c71a9c3f

  • SHA1

    e033a598d87a9f30b6c122b5a282729aab05546e

  • SHA256

    609d8f4c00b9e4e3635adc5321c6a46cf3b5ecb1eb7a30b53e527a8358626a7f

  • SHA512

    b6de0ae1eb99348787ddb74ff5a31a392a5038e2e69916041d13404e16f80a2271fdf96a4e40d03f7a7646afb295b0038d800f8403ef1b46effd7ccdbac4196a

  • SSDEEP

    6144:UZfec9EbXDk6RkdK6rG1VVE+IRuHOdrG1VVE+Ik:UZWtI6RkXu9OhuF

Score
10/10
evasionexecutionpersistence

Malware Config

Targets

    • Target

      1019aaaf21eac6361cb61806c71a9c3f_JaffaCakes118

    • Size

      405KB

    • MD5

      1019aaaf21eac6361cb61806c71a9c3f

    • SHA1

      e033a598d87a9f30b6c122b5a282729aab05546e

    • SHA256

      609d8f4c00b9e4e3635adc5321c6a46cf3b5ecb1eb7a30b53e527a8358626a7f

    • SHA512

      b6de0ae1eb99348787ddb74ff5a31a392a5038e2e69916041d13404e16f80a2271fdf96a4e40d03f7a7646afb295b0038d800f8403ef1b46effd7ccdbac4196a

    • SSDEEP

      6144:UZfec9EbXDk6RkdK6rG1VVE+IRuHOdrG1VVE+Ik:UZWtI6RkXu9OhuF

    Score
    10/10
    evasionexecutionpersistence

    • Disables service(s)

      evasionexecution

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks