Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

0dc2cd5d41...18.exe

windows7-x64

10

0dc2cd5d41...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0dc2cd5d41ad7fd0c66c17a854f0d07a_JaffaCakes118

  • Size

    124KB

  • Sample

    240625-mpws2svcph

  • MD5

    0dc2cd5d41ad7fd0c66c17a854f0d07a

  • SHA1

    43c43a59b56c43a48c56c2f81857e90b9cc882fe

  • SHA256

    c4aad4010dd1030f1005a8068da1b99ffee3fab1c8289f2784aff51e40278e68

  • SHA512

    60e8f1eb6fd006a9582de94e0e5e61f1a87a63fc2d733dab0a066bce252d6707e61fc8acbc9ddf87e47be6448183caa8637f7e000edeeee054fe6b47fd8ab85c

  • SSDEEP

    1536:OTExwhwR+3XuBxeDtMYHa27J14ltxporZ45iMNeG0h/y:8ExwhwR+nkeV6gJ1uCt45eq

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0dc2cd5d41ad7fd0c66c17a854f0d07a_JaffaCakes118

    • Size

      124KB

    • MD5

      0dc2cd5d41ad7fd0c66c17a854f0d07a

    • SHA1

      43c43a59b56c43a48c56c2f81857e90b9cc882fe

    • SHA256

      c4aad4010dd1030f1005a8068da1b99ffee3fab1c8289f2784aff51e40278e68

    • SHA512

      60e8f1eb6fd006a9582de94e0e5e61f1a87a63fc2d733dab0a066bce252d6707e61fc8acbc9ddf87e47be6448183caa8637f7e000edeeee054fe6b47fd8ab85c

    • SSDEEP

      1536:OTExwhwR+3XuBxeDtMYHa27J14ltxporZ45iMNeG0h/y:8ExwhwR+nkeV6gJ1uCt45eq

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks