Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

23b469a545...18.exe

windows7-x64

3

23b469a545...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23b469a54523f1ace4906556068187ee_JaffaCakes118

  • Size

    69KB

  • Sample

    240703-2myl7a1gkg

  • MD5

    23b469a54523f1ace4906556068187ee

  • SHA1

    78a14d5ae78359b84fc24f6d187b3377fa0b9ce5

  • SHA256

    8cd6d7e0de2d0a6e2b450a3293b7f2535b2e5bea0b59ba5fb4089c6b9e1a26dd

  • SHA512

    174db63b67e92b83a8b96139f0c55333967a01e2c398b387ab7b00d4b4476f9a1d6030798785a436c689ce2ef2cfa18676f704b31ccbf777d2d048435067daf4

  • SSDEEP

    1536:2Qv2G7iUic/IFKy3gOF9pQkMtgxNAtDkMQtk+rW:hZNZtyQOuk1AtDkLtk+K

Score
7/10
persistence

Malware Config

Targets

    • Target

      23b469a54523f1ace4906556068187ee_JaffaCakes118

    • Size

      69KB

    • MD5

      23b469a54523f1ace4906556068187ee

    • SHA1

      78a14d5ae78359b84fc24f6d187b3377fa0b9ce5

    • SHA256

      8cd6d7e0de2d0a6e2b450a3293b7f2535b2e5bea0b59ba5fb4089c6b9e1a26dd

    • SHA512

      174db63b67e92b83a8b96139f0c55333967a01e2c398b387ab7b00d4b4476f9a1d6030798785a436c689ce2ef2cfa18676f704b31ccbf777d2d048435067daf4

    • SSDEEP

      1536:2Qv2G7iUic/IFKy3gOF9pQkMtgxNAtDkMQtk+rW:hZNZtyQOuk1AtDkLtk+K

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks