Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

00177a0e91...18.dll

windows7-x64

8

00177a0e91...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    00177a0e91cd16c521f562ff5e5922f4_JaffaCakes118

  • Size

    23KB

  • Sample

    240619-xr5tvaxekd

  • MD5

    00177a0e91cd16c521f562ff5e5922f4

  • SHA1

    ef7b34c49dc3175e35f3b56749f10b17101d023b

  • SHA256

    646bf918e57a026cf01e9308b346279db9a3fdc3df4d2535fa742160e55642dd

  • SHA512

    891246247115f58dd0a3ee778e8e76827c57692253920cc66e86b23a3f5f46634b846836c9bef32387cfe1f6346e3a2a06036f1a427d2b47040568bd506261e1

  • SSDEEP

    384:JidD9d6GAW6ABDq4PD6K7Qp0bjP0TE1/vxzxTfwVNxBf:A+ax1MpYMsvVxTfwVR

Score
10/10
evasionpersistenceprivilege_escalation

Malware Config

Targets

    • Target

      00177a0e91cd16c521f562ff5e5922f4_JaffaCakes118

    • Size

      23KB

    • MD5

      00177a0e91cd16c521f562ff5e5922f4

    • SHA1

      ef7b34c49dc3175e35f3b56749f10b17101d023b

    • SHA256

      646bf918e57a026cf01e9308b346279db9a3fdc3df4d2535fa742160e55642dd

    • SHA512

      891246247115f58dd0a3ee778e8e76827c57692253920cc66e86b23a3f5f46634b846836c9bef32387cfe1f6346e3a2a06036f1a427d2b47040568bd506261e1

    • SSDEEP

      384:JidD9d6GAW6ABDq4PD6K7Qp0bjP0TE1/vxzxTfwVNxBf:A+ax1MpYMsvVxTfwVR

    Score
    10/10
    persistenceprivilege_escalationevasion

    • Modifies firewall policy service

      evasion

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks