Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

1aa20ecb76...18.exe

windows7-x64

10

1aa20ecb76...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1aa20ecb76fcc8e6c60519399431d64e_JaffaCakes118

  • Size

    216KB

  • Sample

    240701-kjj6ysvfnq

  • MD5

    1aa20ecb76fcc8e6c60519399431d64e

  • SHA1

    12de2b3bcff8fe6c066e64e1532af6966b8f566a

  • SHA256

    adf2f7ea316706831dfd6c2fce9f8df6b28316df568ceb9b91747dbb8c4083b3

  • SHA512

    9ed64c9a61a72473f9375146bc9cb0ec905f93bc52996ccf60c2f4ffd5c6fd8535f93bcd163a67fdad3e9aafbd0a24f924a797b3caea1f247241d0c4fea6e6de

  • SSDEEP

    3072:92963fKwcyAHtyU472ydQs1Vsd0WpPGFobtkBdk3ENwz:XtR6EUEQs1VseWpPGFobC3k3ENi

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1aa20ecb76fcc8e6c60519399431d64e_JaffaCakes118

    • Size

      216KB

    • MD5

      1aa20ecb76fcc8e6c60519399431d64e

    • SHA1

      12de2b3bcff8fe6c066e64e1532af6966b8f566a

    • SHA256

      adf2f7ea316706831dfd6c2fce9f8df6b28316df568ceb9b91747dbb8c4083b3

    • SHA512

      9ed64c9a61a72473f9375146bc9cb0ec905f93bc52996ccf60c2f4ffd5c6fd8535f93bcd163a67fdad3e9aafbd0a24f924a797b3caea1f247241d0c4fea6e6de

    • SSDEEP

      3072:92963fKwcyAHtyU472ydQs1Vsd0WpPGFobtkBdk3ENwz:XtR6EUEQs1VseWpPGFobC3k3ENi

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks