Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

00017806ad...18.dll

windows7-x64

10

00017806ad...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    00017806adfd7100f845bd5ae38f9344_JaffaCakes118

  • Size

    23KB

  • Sample

    240619-xapfjawdrg

  • MD5

    00017806adfd7100f845bd5ae38f9344

  • SHA1

    86f5bfcb8efd17031c42f8a833bb3d09e6f2d1f1

  • SHA256

    2d46535a274f3553877b4250829d759fe3b8fbccc121ccc85ba6576c5b58b954

  • SHA512

    0de0160e4c436bfe8d67222b5ed2a8a29c2f16d3dbba1bf6e27b910754043fe7700baa9908fa1fd31ea1d8273f52cccb7bd1106ced8eb830e8dc4c1271ec8d5e

  • SSDEEP

    384:xPyZNjtU2mzQBz22XBVvNZiAtnCjx/PEQROY4zEiEVbg/zy:pyZ66TfUAgx/7ROYYEiE1g/O

Score
10/10
evasionpersistenceprivilege_escalation

Malware Config

Targets

    • Target

      00017806adfd7100f845bd5ae38f9344_JaffaCakes118

    • Size

      23KB

    • MD5

      00017806adfd7100f845bd5ae38f9344

    • SHA1

      86f5bfcb8efd17031c42f8a833bb3d09e6f2d1f1

    • SHA256

      2d46535a274f3553877b4250829d759fe3b8fbccc121ccc85ba6576c5b58b954

    • SHA512

      0de0160e4c436bfe8d67222b5ed2a8a29c2f16d3dbba1bf6e27b910754043fe7700baa9908fa1fd31ea1d8273f52cccb7bd1106ced8eb830e8dc4c1271ec8d5e

    • SSDEEP

      384:xPyZNjtU2mzQBz22XBVvNZiAtnCjx/PEQROY4zEiEVbg/zy:pyZ66TfUAgx/7ROYYEiE1g/O

    Score
    10/10
    evasionpersistenceprivilege_escalation

    • Modifies firewall policy service

      evasion

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks