Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

0c8467d637...18.dll

windows7-x64

10

0c8467d637...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0c8467d6372b785b099abeeb63e154ad_JaffaCakes118

  • Size

    22KB

  • Sample

    240625-e1jzmazfrf

  • MD5

    0c8467d6372b785b099abeeb63e154ad

  • SHA1

    e3c252024b1d1e7a5400edaea9279ba4583a0f24

  • SHA256

    b10fd450f4dfdbe8f7778c495e5c4ac80a25dd45a2e4d63ef254fb53d6470551

  • SHA512

    b65654bd29b9bcd87b29ddd039d230afd354855ea3a2e50e6ed86159bb0322987a1bf9b06775658c90a9c3ff436879c8cf91ba9775a110d19f5cf701133e2891

  • SSDEEP

    384:JPyZNjtU2mSEImLyT1qLYZmAc5xvUZMujoHREWAY/z29mne5:ByZexyTMkVc5xvkoHHA629m0

Score
10/10
evasionpersistenceprivilege_escalation

Malware Config

Targets

    • Target

      0c8467d6372b785b099abeeb63e154ad_JaffaCakes118

    • Size

      22KB

    • MD5

      0c8467d6372b785b099abeeb63e154ad

    • SHA1

      e3c252024b1d1e7a5400edaea9279ba4583a0f24

    • SHA256

      b10fd450f4dfdbe8f7778c495e5c4ac80a25dd45a2e4d63ef254fb53d6470551

    • SHA512

      b65654bd29b9bcd87b29ddd039d230afd354855ea3a2e50e6ed86159bb0322987a1bf9b06775658c90a9c3ff436879c8cf91ba9775a110d19f5cf701133e2891

    • SSDEEP

      384:JPyZNjtU2mSEImLyT1qLYZmAc5xvUZMujoHREWAY/z29mne5:ByZexyTMkVc5xvkoHHA629m0

    Score
    10/10
    evasionpersistenceprivilege_escalation

    • Modifies firewall policy service

      evasion

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks