Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

23cb26f635...18.exe

windows7-x64

7

23cb26f635...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23cb26f635c4e2a3897a4a3427f8f5d5_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240703-27bcdssgkf

  • MD5

    23cb26f635c4e2a3897a4a3427f8f5d5

  • SHA1

    5d1135ddfed215a4ddfe85a207e80a5098ea6657

  • SHA256

    1b6d3d8b5cf8af37b7ead131124df60958500d3556ceb3aecd4b14d447cfd972

  • SHA512

    951ec9e3f71d94315b8a01d8f88883a8dca3ecbb5ddd3b494184e57d474448ed9e7f2b9bd28efce293129cad552ced0580373a9fb9b1a6b0ab650da6ad62a78f

  • SSDEEP

    12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27Qitjxq:r5sJo6YrFUiyAak11Ltjxq

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      23cb26f635c4e2a3897a4a3427f8f5d5_JaffaCakes118

    • Size

      1.0MB

    • MD5

      23cb26f635c4e2a3897a4a3427f8f5d5

    • SHA1

      5d1135ddfed215a4ddfe85a207e80a5098ea6657

    • SHA256

      1b6d3d8b5cf8af37b7ead131124df60958500d3556ceb3aecd4b14d447cfd972

    • SHA512

      951ec9e3f71d94315b8a01d8f88883a8dca3ecbb5ddd3b494184e57d474448ed9e7f2b9bd28efce293129cad552ced0580373a9fb9b1a6b0ab650da6ad62a78f

    • SSDEEP

      12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27Qitjxq:r5sJo6YrFUiyAak11Ltjxq

    Score
    7/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks