Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

210f3fd69d...18.exe

windows7-x64

7

210f3fd69d...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    210f3fd69d01e44ea7248d12eba587e4_JaffaCakes118

  • Size

    3.2MB

  • Sample

    240703-exzkxa1dnp

  • MD5

    210f3fd69d01e44ea7248d12eba587e4

  • SHA1

    f9d8a239913456cd4199a9e56b2c4b69e2694770

  • SHA256

    7d04acaad6beb8b1dfd4d63ae83aa3d1e43015a7f733513173ece5d7399c7e0d

  • SHA512

    62a7058b5d6f8639a39334cb6eed537cb749a3ece399553ff26985c456a8d3a9544c28584353de8b73091785dd596ca26828dcbe93db767636259398f6ec51da

  • SSDEEP

    49152:h/gFk4qWdj5c4CCVSGB6THfmyCuv+vSAURu7m+Jyh2ihyAhJKzc4EABPT55qP3gZ:21jdjjkGcDCu20um+G5hyAhHMPTzqP3G

Score
7/10
upx

Malware Config

Targets

    • Target

      210f3fd69d01e44ea7248d12eba587e4_JaffaCakes118

    • Size

      3.2MB

    • MD5

      210f3fd69d01e44ea7248d12eba587e4

    • SHA1

      f9d8a239913456cd4199a9e56b2c4b69e2694770

    • SHA256

      7d04acaad6beb8b1dfd4d63ae83aa3d1e43015a7f733513173ece5d7399c7e0d

    • SHA512

      62a7058b5d6f8639a39334cb6eed537cb749a3ece399553ff26985c456a8d3a9544c28584353de8b73091785dd596ca26828dcbe93db767636259398f6ec51da

    • SSDEEP

      49152:h/gFk4qWdj5c4CCVSGB6THfmyCuv+vSAURu7m+Jyh2ihyAhJKzc4EABPT55qP3gZ:21jdjjkGcDCu20um+G5hyAhHMPTzqP3G

    Score
    7/10
    upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks