Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

b170d408ce...18.exe

windows7-x64

7

b170d408ce...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b170d408ce29781ef0ea9c01d224bb20_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240616-de3deawhrd

  • MD5

    b170d408ce29781ef0ea9c01d224bb20

  • SHA1

    b07866e4c94e97487de4d3a7fea83aec4fd020c7

  • SHA256

    5fd49a865edd340425c96f3ba5630622d978f2de3c270417b745a61d817b6c7f

  • SHA512

    9732131abe4c99c80c43569b76d2b47e5e950058b8afff9c74e1ef3bfeb24360733ea6f530be287a0c3a04767df87d503492abdead456fd038217c31bc46ef19

  • SSDEEP

    24576:rMHnA4I3OJcm9CV/EIEEfdnGzrzTZ+CsZ6Tniyoh:rMI3MJkEAdGzzZ9Eiiyoh

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      b170d408ce29781ef0ea9c01d224bb20_JaffaCakes118

    • Size

      1.0MB

    • MD5

      b170d408ce29781ef0ea9c01d224bb20

    • SHA1

      b07866e4c94e97487de4d3a7fea83aec4fd020c7

    • SHA256

      5fd49a865edd340425c96f3ba5630622d978f2de3c270417b745a61d817b6c7f

    • SHA512

      9732131abe4c99c80c43569b76d2b47e5e950058b8afff9c74e1ef3bfeb24360733ea6f530be287a0c3a04767df87d503492abdead456fd038217c31bc46ef19

    • SSDEEP

      24576:rMHnA4I3OJcm9CV/EIEEfdnGzrzTZ+CsZ6Tniyoh:rMI3MJkEAdGzzZ9Eiiyoh

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks