Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

00100da6ba...18.dll

windows7-x64

10

00100da6ba...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    00100da6ba0ffb979b42d4c4aa59a328_JaffaCakes118

  • Size

    24KB

  • Sample

    240619-xmvs3s1hjk

  • MD5

    00100da6ba0ffb979b42d4c4aa59a328

  • SHA1

    b1f371e0c086c3aa3b25dee3ef0c412867088ee5

  • SHA256

    4d8b76d2288ad9949d5f2d6c2c99554edef0a5bf3206d64d4a3549bed3e3fb2d

  • SHA512

    af8a34ea8e4ffcd075a0f535a4277db9eec7e40bb866a86f9f6c78d303cf6d7f6d0b8fb2620427b6218c6e0e63c4891f7bc008c40e5a61d62e204e26ec3416c2

  • SSDEEP

    384:GfdD9d6G4f/r1PcOXzqjyN8xTOzKlgwqej+dkEpTNWzwIdvVQhKdDo:GfK0OjAyKlgwqe+dXNmwIdtQhKE

Score
10/10
evasionpersistenceprivilege_escalation

Malware Config

Targets

    • Target

      00100da6ba0ffb979b42d4c4aa59a328_JaffaCakes118

    • Size

      24KB

    • MD5

      00100da6ba0ffb979b42d4c4aa59a328

    • SHA1

      b1f371e0c086c3aa3b25dee3ef0c412867088ee5

    • SHA256

      4d8b76d2288ad9949d5f2d6c2c99554edef0a5bf3206d64d4a3549bed3e3fb2d

    • SHA512

      af8a34ea8e4ffcd075a0f535a4277db9eec7e40bb866a86f9f6c78d303cf6d7f6d0b8fb2620427b6218c6e0e63c4891f7bc008c40e5a61d62e204e26ec3416c2

    • SSDEEP

      384:GfdD9d6G4f/r1PcOXzqjyN8xTOzKlgwqej+dkEpTNWzwIdvVQhKdDo:GfK0OjAyKlgwqe+dXNmwIdtQhKE

    Score
    10/10
    evasionpersistenceprivilege_escalation

    • Modifies firewall policy service

      evasion

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks