Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

706ac19bfd...18.exe

windows7-x64

10

706ac19bfd...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    706ac19bfd889f126004731a84f461b3_JaffaCakes118

  • Size

    724KB

  • Sample

    240525-bqs8rshg89

  • MD5

    706ac19bfd889f126004731a84f461b3

  • SHA1

    26e2433d33bfc19859e1b25a200e7dfb367e10ff

  • SHA256

    c8ad1c814b4c9320372d7b1f7e10e4e14b696fa0eeff3a2f5d4a04e0d6b918ab

  • SHA512

    6427b1c48330c8e44dc51905b303a1c765d56b9950d39220a37450dd79342b9db2d41e368fac67c65d226e7b9f8284bcaae9ecce6cea96f946b5ec04f3865b79

  • SSDEEP

    6144:UZfec9EbXDk6Rk8KWnmy+g4VrG1VVE+Ih/UOPSe570Szp3fuHOWnmy+g4VrG1VV3:UZWtI6RkgKupOB0DOWKupOB0v

Score
10/10
evasionexecutionpersistence

Malware Config

Targets

    • Target

      706ac19bfd889f126004731a84f461b3_JaffaCakes118

    • Size

      724KB

    • MD5

      706ac19bfd889f126004731a84f461b3

    • SHA1

      26e2433d33bfc19859e1b25a200e7dfb367e10ff

    • SHA256

      c8ad1c814b4c9320372d7b1f7e10e4e14b696fa0eeff3a2f5d4a04e0d6b918ab

    • SHA512

      6427b1c48330c8e44dc51905b303a1c765d56b9950d39220a37450dd79342b9db2d41e368fac67c65d226e7b9f8284bcaae9ecce6cea96f946b5ec04f3865b79

    • SSDEEP

      6144:UZfec9EbXDk6Rk8KWnmy+g4VrG1VVE+Ih/UOPSe570Szp3fuHOWnmy+g4VrG1VV3:UZWtI6RkgKupOB0DOWKupOB0v

    Score
    10/10
    evasionexecutionpersistence

    • Disables service(s)

      evasionexecution

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks