Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

8a2c1b0d95...18.exe

windows7-x64

6

8a2c1b0d95...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a2c1b0d9595f4f9e78ff7d0789d2581_JaffaCakes118

  • Size

    1.7MB

  • Sample

    240601-me6v9shh2v

  • MD5

    8a2c1b0d9595f4f9e78ff7d0789d2581

  • SHA1

    3201c5e5c643bcab5d1a3d1584fd365e49f00670

  • SHA256

    4ae814256fb025355b983e0d962d4cb5857968a3ab2b3ca160373b8d5626305e

  • SHA512

    e274bb0d161fe1af266bab8c68fe3a0e8554f7cdb6c9678560da28ccc41a5748218e3af2d89ffdd466914b11def0b152835a9547a9887321cd468bdaa3095cdf

  • SSDEEP

    24576:w+6UW9BQiwAuC7/hJ9AOpuHGRqlBeSOaQevXF5RI5/yBE8FF9:r6UWDnxJeGRqlASOaXFgCF9

Score
6/10
persistence

Malware Config

Targets

    • Target

      8a2c1b0d9595f4f9e78ff7d0789d2581_JaffaCakes118

    • Size

      1.7MB

    • MD5

      8a2c1b0d9595f4f9e78ff7d0789d2581

    • SHA1

      3201c5e5c643bcab5d1a3d1584fd365e49f00670

    • SHA256

      4ae814256fb025355b983e0d962d4cb5857968a3ab2b3ca160373b8d5626305e

    • SHA512

      e274bb0d161fe1af266bab8c68fe3a0e8554f7cdb6c9678560da28ccc41a5748218e3af2d89ffdd466914b11def0b152835a9547a9887321cd468bdaa3095cdf

    • SSDEEP

      24576:w+6UW9BQiwAuC7/hJ9AOpuHGRqlBeSOaQevXF5RI5/yBE8FF9:r6UWDnxJeGRqlASOaXFgCF9

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks