Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

0d4acece9f...18.dll

windows7-x64

10

0d4acece9f...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d4acece9f8c424840a34c8e76812a21_JaffaCakes118

  • Size

    244KB

  • Sample

    240625-jtxz5axfpg

  • MD5

    0d4acece9f8c424840a34c8e76812a21

  • SHA1

    8cff36ebcfd9fc4e359ea941e64eb2763e2a5030

  • SHA256

    3b6476d85f46232f65e70d364e22f37ce6d301fbf58b08cef44bcd8ffadb0905

  • SHA512

    1d793d53f4ab95ab627094f9ba5801d5a03c911d405e69af79ac5e80c363135b2a693a0a781fcca3722879cea744b47fa147748cbe16481fc0ff492082a3f96d

  • SSDEEP

    3072:aXC5JVDzGAg0FuQPw0cCwfwn6qCqvEP/jawuZ0S6kA6GAQiATtw6uwx38YAy2y0R:aeLuAOowFwn6d/ed0SRdATt3XMoDEnEw

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      0d4acece9f8c424840a34c8e76812a21_JaffaCakes118

    • Size

      244KB

    • MD5

      0d4acece9f8c424840a34c8e76812a21

    • SHA1

      8cff36ebcfd9fc4e359ea941e64eb2763e2a5030

    • SHA256

      3b6476d85f46232f65e70d364e22f37ce6d301fbf58b08cef44bcd8ffadb0905

    • SHA512

      1d793d53f4ab95ab627094f9ba5801d5a03c911d405e69af79ac5e80c363135b2a693a0a781fcca3722879cea744b47fa147748cbe16481fc0ff492082a3f96d

    • SSDEEP

      3072:aXC5JVDzGAg0FuQPw0cCwfwn6qCqvEP/jawuZ0S6kA6GAQiATtw6uwx38YAy2y0R:aeLuAOowFwn6d/ed0SRdATt3XMoDEnEw

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks