Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

0758e3a1df...18.exe

windows7-x64

10

0758e3a1df...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0758e3a1dfb3d1d721042e0a8e62373a_JaffaCakes118

  • Size

    204KB

  • Sample

    240620-s1z8haygrj

  • MD5

    0758e3a1dfb3d1d721042e0a8e62373a

  • SHA1

    3f93743af81d1cfebd1f23ae967dd20dcef1b2e6

  • SHA256

    9865fb72c203a823d2d865818335826396452dec506cfacda66ed0f61dbc0731

  • SHA512

    250ba87489f71d2b21ea929a145c2345858a49cfff65fee502e64b34f0237f00c1e864aa5a9733517cd6f47798b81510b93535f0e58d670fc0bf6054d9a091e7

  • SSDEEP

    3072:mmRW8oeM0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUWoG:BANeM4QxL7B9W0c1RCzR/fSmljG

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0758e3a1dfb3d1d721042e0a8e62373a_JaffaCakes118

    • Size

      204KB

    • MD5

      0758e3a1dfb3d1d721042e0a8e62373a

    • SHA1

      3f93743af81d1cfebd1f23ae967dd20dcef1b2e6

    • SHA256

      9865fb72c203a823d2d865818335826396452dec506cfacda66ed0f61dbc0731

    • SHA512

      250ba87489f71d2b21ea929a145c2345858a49cfff65fee502e64b34f0237f00c1e864aa5a9733517cd6f47798b81510b93535f0e58d670fc0bf6054d9a091e7

    • SSDEEP

      3072:mmRW8oeM0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUWoG:BANeM4QxL7B9W0c1RCzR/fSmljG

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks