Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

8

2e3875e26c...18.doc

windows7-x64

10

2e3875e26c...18.doc

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2e3875e26c9f346b54c4afa12b04ac29_JaffaCakes118

  • Size

    85KB

  • Sample

    240510-kb8vcacg4t

  • MD5

    2e3875e26c9f346b54c4afa12b04ac29

  • SHA1

    9efc30c5886061492acc697ae2c6fb568080dc7b

  • SHA256

    1786759ce3f8294887c1dd6a2431fe69af2af80d33b022b3f7ca2a7595e2e488

  • SHA512

    577c22949f5c785c7d47a193ab61ec4f0a15c0876c440d643b4c226ab9fbe23f164c34939152be66762813b3f13909dbe8e301335c926627b5365554b8ef2d77

  • SSDEEP

    768:MTXUAvRB5LcJgwo4r65/KCBuxEYqdUqVt/azV8Vq4rYWAHpP7p6pXpc:KlvRB5QIv3yqCWAHd7g56

Score
10/10
executionmacro

Malware Config

Targets

    • Target

      2e3875e26c9f346b54c4afa12b04ac29_JaffaCakes118

    • Size

      85KB

    • MD5

      2e3875e26c9f346b54c4afa12b04ac29

    • SHA1

      9efc30c5886061492acc697ae2c6fb568080dc7b

    • SHA256

      1786759ce3f8294887c1dd6a2431fe69af2af80d33b022b3f7ca2a7595e2e488

    • SHA512

      577c22949f5c785c7d47a193ab61ec4f0a15c0876c440d643b4c226ab9fbe23f164c34939152be66762813b3f13909dbe8e301335c926627b5365554b8ef2d77

    • SSDEEP

      768:MTXUAvRB5LcJgwo4r65/KCBuxEYqdUqVt/azV8Vq4rYWAHpP7p6pXpc:KlvRB5QIv3yqCWAHd7g56

    Score
    10/10
    execution

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks