Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

a8db020bc0...18.vbs

windows7-x64

7

a8db020bc0...18.vbs

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a8db020bc02e6fbcaac5aeb301cdc38e_JaffaCakes118

  • Size

    497KB

  • Sample

    240614-kysfwaxdnj

  • MD5

    a8db020bc02e6fbcaac5aeb301cdc38e

  • SHA1

    db5088a363771d518572fdf0e9b4c62f70314251

  • SHA256

    1816a9023320b892c54fc1abdc4ba3177ae9ecee4f145efa71d290b357eb1061

  • SHA512

    50eb95130a192ef4c622007cf6075bbbdcddd80b81298136c9f1ccaecf7e2b8f71474e3d2a5de178e81b9a76a54edb1d65a7951992db4c240590f50ed88e7a9b

  • SSDEEP

    384:WRWRQ2wCLNka39k5/8xd9f3K2qIVT4CzztUakZN7llfR:lRMo39k5kxvf3K2LVrtUnR

Score
7/10

Malware Config

Targets

    • Target

      a8db020bc02e6fbcaac5aeb301cdc38e_JaffaCakes118

    • Size

      497KB

    • MD5

      a8db020bc02e6fbcaac5aeb301cdc38e

    • SHA1

      db5088a363771d518572fdf0e9b4c62f70314251

    • SHA256

      1816a9023320b892c54fc1abdc4ba3177ae9ecee4f145efa71d290b357eb1061

    • SHA512

      50eb95130a192ef4c622007cf6075bbbdcddd80b81298136c9f1ccaecf7e2b8f71474e3d2a5de178e81b9a76a54edb1d65a7951992db4c240590f50ed88e7a9b

    • SSDEEP

      384:WRWRQ2wCLNka39k5/8xd9f3K2qIVT4CzztUakZN7llfR:lRMo39k5kxvf3K2LVrtUnR

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks