Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

18d4360bdb...18.exe

windows7-x64

10

18d4360bdb...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18d4360bdb5c027080cb0b2ad6029a0e_JaffaCakes118

  • Size

    164KB

  • Sample

    240628-ffth1avcmj

  • MD5

    18d4360bdb5c027080cb0b2ad6029a0e

  • SHA1

    fae43f8758dd0c516d61fb0bc3a35987a0d9e9ac

  • SHA256

    9cf446d05c5d1c0d9056f0fb3023397b09dfc299a51e9c282958ae083c0e894f

  • SHA512

    792570de0fbe423b069f0c9de95f918f30982409033d71ef5ab4d1f2e96dd518d1b680334653014eff397aede203e2ba929fc8643b3298836780071ce5684d63

  • SSDEEP

    3072:4/X8qNV76jgrW2nWnqgLU/mLwITxm8KU/CaGVul46PcL76SAN:usqT7CgrZPgL5wexm6VlgvA

Score
10/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      18d4360bdb5c027080cb0b2ad6029a0e_JaffaCakes118

    • Size

      164KB

    • MD5

      18d4360bdb5c027080cb0b2ad6029a0e

    • SHA1

      fae43f8758dd0c516d61fb0bc3a35987a0d9e9ac

    • SHA256

      9cf446d05c5d1c0d9056f0fb3023397b09dfc299a51e9c282958ae083c0e894f

    • SHA512

      792570de0fbe423b069f0c9de95f918f30982409033d71ef5ab4d1f2e96dd518d1b680334653014eff397aede203e2ba929fc8643b3298836780071ce5684d63

    • SSDEEP

      3072:4/X8qNV76jgrW2nWnqgLU/mLwITxm8KU/CaGVul46PcL76SAN:usqT7CgrZPgL5wexm6VlgvA

    Score
    10/10
    persistencespywarestealerupx

    • Modifies WinLogon for persistence

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks