Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

06df0980ff...18.exe

windows7-x64

8

06df0980ff...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06df0980fff3b950dcf02359b7162ee5_JaffaCakes118

  • Size

    4.9MB

  • Sample

    240620-rxstkssdrd

  • MD5

    06df0980fff3b950dcf02359b7162ee5

  • SHA1

    d2a9de6ae30f40243d941fe747da2f20790b6e62

  • SHA256

    0590894e2ef5e46ca7044fec6df83d362021c7a0798aed4aa38baa6e2fe066ed

  • SHA512

    46f815717388a4bd273dcae7df9577a37b8089b8bc2a17b087ea7418d24af2a07722072ffbe2374f6a0697780fddf9e5fb360302b1452143b87aba761681f4e8

  • SSDEEP

    98304:3Mtb7/SrJkyTl9KMkEfj9gMWRW1xpF27ZOidJf9a52DLsz8RG3slJu+NEOt:QurJR9/JgtWjpF2VtdJ852BceTNvt

Score
8/10
evasionexecutionpersistence

Malware Config

Targets

    • Target

      06df0980fff3b950dcf02359b7162ee5_JaffaCakes118

    • Size

      4.9MB

    • MD5

      06df0980fff3b950dcf02359b7162ee5

    • SHA1

      d2a9de6ae30f40243d941fe747da2f20790b6e62

    • SHA256

      0590894e2ef5e46ca7044fec6df83d362021c7a0798aed4aa38baa6e2fe066ed

    • SHA512

      46f815717388a4bd273dcae7df9577a37b8089b8bc2a17b087ea7418d24af2a07722072ffbe2374f6a0697780fddf9e5fb360302b1452143b87aba761681f4e8

    • SSDEEP

      98304:3Mtb7/SrJkyTl9KMkEfj9gMWRW1xpF27ZOidJf9a52DLsz8RG3slJu+NEOt:QurJR9/JgtWjpF2VtdJ852BceTNvt

    Score
    8/10
    evasionexecutionpersistence

    • Stops running service(s)

      evasionexecution

    • Uses Session Manager for persistence

      Creates Session Manager registry key to run executable early in system boot.

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks