Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

1

1023637b11...18.exe

windows7-x64

9

1023637b11...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1023637b11883089bf662dc64c97e9a0_JaffaCakes118

  • Size

    500KB

  • Sample

    240503-kwxmtabb9s

  • MD5

    1023637b11883089bf662dc64c97e9a0

  • SHA1

    310a91364f7f0e37b85db7d41b510cdf18ff1ad1

  • SHA256

    becfab7c46a3f51610d8ee07b6a39445a2bb23397284e1386f7c36e248ac028e

  • SHA512

    6bd6982b1a8c4f94566c72c73b93d028856f189cb3e0a9e293475b772859fecf114e08efc85cac48118354e54def9da0df784a8b40ca2316912cc50ab1e5cd3c

  • SSDEEP

    6144:yekcI4dnpjD9lTCJCEQ7JjPCMcTdz5CZj0zmo20eeCQ3+e6AuY+fnG9P94FKxuRR:yekKttqJb3muTCP/G/xuGIh5

Score
9/10
evasion

Malware Config

Targets

    • Target

      1023637b11883089bf662dc64c97e9a0_JaffaCakes118

    • Size

      500KB

    • MD5

      1023637b11883089bf662dc64c97e9a0

    • SHA1

      310a91364f7f0e37b85db7d41b510cdf18ff1ad1

    • SHA256

      becfab7c46a3f51610d8ee07b6a39445a2bb23397284e1386f7c36e248ac028e

    • SHA512

      6bd6982b1a8c4f94566c72c73b93d028856f189cb3e0a9e293475b772859fecf114e08efc85cac48118354e54def9da0df784a8b40ca2316912cc50ab1e5cd3c

    • SSDEEP

      6144:yekcI4dnpjD9lTCJCEQ7JjPCMcTdz5CZj0zmo20eeCQ3+e6AuY+fnG9P94FKxuRR:yekKttqJb3muTCP/G/xuGIh5

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks