Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

97746edc28...18.exe

windows7-x64

8

97746edc28...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    97746edc28621dadc9396318e8010d95_JaffaCakes118

  • Size

    119KB

  • Sample

    240605-h6kpwsac27

  • MD5

    97746edc28621dadc9396318e8010d95

  • SHA1

    2bdb4ba79b96185ee3bd4961452966997113eaf9

  • SHA256

    0a671beba270f68d6c5d6ae9bae13d1df60df2db582a0c7bc0c931a3f44b9c1a

  • SHA512

    55c85a8a72d09d9692938f553afa1a51be8ec6f58ac530ac763aed907f9a076e899002f05ec5d0063a5e88236bd1b008f0c87e926b4d73bf7db8cce774cd9fc2

  • SSDEEP

    1536:LTKJtyLNVcBGsjEhUwiM7w1Nj6+UMbO2lq2oDSSBJjRL2pHIcg2/tAkzIePcs:6JtyL3ElEhUwiM7wpUD2qfZaXMe

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      97746edc28621dadc9396318e8010d95_JaffaCakes118

    • Size

      119KB

    • MD5

      97746edc28621dadc9396318e8010d95

    • SHA1

      2bdb4ba79b96185ee3bd4961452966997113eaf9

    • SHA256

      0a671beba270f68d6c5d6ae9bae13d1df60df2db582a0c7bc0c931a3f44b9c1a

    • SHA512

      55c85a8a72d09d9692938f553afa1a51be8ec6f58ac530ac763aed907f9a076e899002f05ec5d0063a5e88236bd1b008f0c87e926b4d73bf7db8cce774cd9fc2

    • SSDEEP

      1536:LTKJtyLNVcBGsjEhUwiM7w1Nj6+UMbO2lq2oDSSBJjRL2pHIcg2/tAkzIePcs:6JtyL3ElEhUwiM7wpUD2qfZaXMe

    Score
    8/10
    persistenceupx

    • Adds policy Run key to start application

      persistence

    • Modifies Installed Components in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks