Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

3013059a3d...18.exe

windows7-x64

10

3013059a3d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3013059a3ddafae0ddba232b2e5992f4_JaffaCakes118

  • Size

    549KB

  • Sample

    240510-t9g9qafd6y

  • MD5

    3013059a3ddafae0ddba232b2e5992f4

  • SHA1

    24804654a2c21447d697bf6ccda30befdfd281f9

  • SHA256

    3c6643d551530b5832d0175b30a4e9c0ac20e59f0d438b3096804571d6f57b70

  • SHA512

    1c52f9fb3dd2732e66664a319cc283fefdcd0b5a180a795390b93eef2470ac20feabbff6e711660d39582faf70f5bf9a49a6abeeffc7ff85babb1781c72f02e5

  • SSDEEP

    6144:UZfec9EbXDk6RkNKWnmy+g4VrG1VVE+Iznmy+g4VrG1VVE+Iznmy+g4rRQJ/os:UZWtI6RkjKu0Ku0Ks/os

Score
10/10
evasionexecutionpersistence

Malware Config

Targets

    • Target

      3013059a3ddafae0ddba232b2e5992f4_JaffaCakes118

    • Size

      549KB

    • MD5

      3013059a3ddafae0ddba232b2e5992f4

    • SHA1

      24804654a2c21447d697bf6ccda30befdfd281f9

    • SHA256

      3c6643d551530b5832d0175b30a4e9c0ac20e59f0d438b3096804571d6f57b70

    • SHA512

      1c52f9fb3dd2732e66664a319cc283fefdcd0b5a180a795390b93eef2470ac20feabbff6e711660d39582faf70f5bf9a49a6abeeffc7ff85babb1781c72f02e5

    • SSDEEP

      6144:UZfec9EbXDk6RkNKWnmy+g4VrG1VVE+Iznmy+g4VrG1VVE+Iznmy+g4rRQJ/os:UZWtI6RkjKu0Ku0Ks/os

    Score
    10/10
    evasionexecutionpersistence

    • Disables service(s)

      evasionexecution

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks