Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

0cfb42913f...18.exe

windows7-x64

7

0cfb42913f...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0cfb42913fe45b6b7989356999d493f4_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240625-g1fnbaxelm

  • MD5

    0cfb42913fe45b6b7989356999d493f4

  • SHA1

    6c505aca4f01f60d459610e991546d1dceabfd47

  • SHA256

    dbe205dc5bad1a8598c4b8da25bb4f94dd360b5a6692517d5cdfd70e49fd7191

  • SHA512

    dea85606d94968727bd263e0455f542a5ed36a72f89b61cb9fdcfe58a13417b31275c4a95f23fc13b61e833225b9af0739f60e15d27d4fcab1efcb7cd2a50566

  • SSDEEP

    98304:StH8TYdl72SNfN2m0aIRRRCKrrKgg0oC5xf30iUtvHfIaE:StH8OqS+RrCqi8831E

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      0cfb42913fe45b6b7989356999d493f4_JaffaCakes118

    • Size

      5.0MB

    • MD5

      0cfb42913fe45b6b7989356999d493f4

    • SHA1

      6c505aca4f01f60d459610e991546d1dceabfd47

    • SHA256

      dbe205dc5bad1a8598c4b8da25bb4f94dd360b5a6692517d5cdfd70e49fd7191

    • SHA512

      dea85606d94968727bd263e0455f542a5ed36a72f89b61cb9fdcfe58a13417b31275c4a95f23fc13b61e833225b9af0739f60e15d27d4fcab1efcb7cd2a50566

    • SSDEEP

      98304:StH8TYdl72SNfN2m0aIRRRCKrrKgg0oC5xf30iUtvHfIaE:StH8OqS+RrCqi8831E

    Score
    7/10
    discoverypersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks