Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

09410cd64e...18.exe

windows7-x64

10

09410cd64e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    09410cd64e4c3ddc45a0f7a9e705093c_JaffaCakes118

  • Size

    60KB

  • Sample

    240624-slwa1asbrp

  • MD5

    09410cd64e4c3ddc45a0f7a9e705093c

  • SHA1

    e6446fd06fa7efbb34f345677f6d6a571eb9fe86

  • SHA256

    e2c6c075e5337f1c29781972cbd7a849486fcf2a9aab258a5848104739e334bb

  • SHA512

    9de6a85292a9ee121c493057395328f3d446dc8d47154a649b8b32a3717f734a456087cb9702f13d7a343e01327d66af924bf5798e0f547901a71cd6175e4373

  • SSDEEP

    768:+XWmpnBOFlpJ1VUU6+9A/v/bVlbdfs3OfKDHGIHY56WX:+XWNpJXd6y43wY56WX

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      09410cd64e4c3ddc45a0f7a9e705093c_JaffaCakes118

    • Size

      60KB

    • MD5

      09410cd64e4c3ddc45a0f7a9e705093c

    • SHA1

      e6446fd06fa7efbb34f345677f6d6a571eb9fe86

    • SHA256

      e2c6c075e5337f1c29781972cbd7a849486fcf2a9aab258a5848104739e334bb

    • SHA512

      9de6a85292a9ee121c493057395328f3d446dc8d47154a649b8b32a3717f734a456087cb9702f13d7a343e01327d66af924bf5798e0f547901a71cd6175e4373

    • SSDEEP

      768:+XWmpnBOFlpJ1VUU6+9A/v/bVlbdfs3OfKDHGIHY56WX:+XWNpJXd6y43wY56WX

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks