Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

1b78c272c9...18.exe

windows7-x64

3

1b78c272c9...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b78c272c9c173e039fe5496ccb1d5f6_JaffaCakes118

  • Size

    51KB

  • Sample

    240701-qqe4gaxepm

  • MD5

    1b78c272c9c173e039fe5496ccb1d5f6

  • SHA1

    1b2c16f90ae43b983d9a8441921dd3f90ccd70b5

  • SHA256

    e5b5658e02b1cb3a03e5259d1cc2632a95755ec5da92f696388f9481f1452fe6

  • SHA512

    0c7e4d3b030c28aafe23a416330ad06b9c1b2a59d6d1fde3cf230aa0222bf89dc41b9fb18373491eabefb9a4c912bed4eacc5d14fda0bf7d129dce0a9eef54de

  • SSDEEP

    768:D1WwJwLDhR0SKIBA8mKuwOC939D1U7QhCKSUqFd/8XztqQ0AiTnc5ui:wwEhxURwnpDU7mNSUqFdW8Q0M5ui

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      1b78c272c9c173e039fe5496ccb1d5f6_JaffaCakes118

    • Size

      51KB

    • MD5

      1b78c272c9c173e039fe5496ccb1d5f6

    • SHA1

      1b2c16f90ae43b983d9a8441921dd3f90ccd70b5

    • SHA256

      e5b5658e02b1cb3a03e5259d1cc2632a95755ec5da92f696388f9481f1452fe6

    • SHA512

      0c7e4d3b030c28aafe23a416330ad06b9c1b2a59d6d1fde3cf230aa0222bf89dc41b9fb18373491eabefb9a4c912bed4eacc5d14fda0bf7d129dce0a9eef54de

    • SSDEEP

      768:D1WwJwLDhR0SKIBA8mKuwOC939D1U7QhCKSUqFd/8XztqQ0AiTnc5ui:wwEhxURwnpDU7mNSUqFdW8Q0M5ui

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks