Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

21cf2423cc...18.exe

windows7-x64

7

21cf2423cc...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21cf2423cc48b1dd2496bc34b435a932_JaffaCakes118

  • Size

    797KB

  • Sample

    240703-k4fdhazcrl

  • MD5

    21cf2423cc48b1dd2496bc34b435a932

  • SHA1

    639257ece6992db28a2962a8bde071507ebfce55

  • SHA256

    ff3b095fdcb45b12a60ba1c914578da6233a047e1111d53c7640db20e9e208c7

  • SHA512

    0cb636f041c82bff1b6925f740a2086fd885de12751d15a6bd98daa7d088be46cc5fc6fec650bbf36fd36eeee58acdc0360be405c6158f5137a2a328cd05f0e0

  • SSDEEP

    12288:Hj/kT1PyjoPiAYIvXGtU8VqDPvlZSfpjy/LuYD3Njb0ZM9+LNDiz6vrEFERxv951:D89b7CCuUCjcA6cLvW

Score
7/10
persistence

Malware Config

Targets

    • Target

      21cf2423cc48b1dd2496bc34b435a932_JaffaCakes118

    • Size

      797KB

    • MD5

      21cf2423cc48b1dd2496bc34b435a932

    • SHA1

      639257ece6992db28a2962a8bde071507ebfce55

    • SHA256

      ff3b095fdcb45b12a60ba1c914578da6233a047e1111d53c7640db20e9e208c7

    • SHA512

      0cb636f041c82bff1b6925f740a2086fd885de12751d15a6bd98daa7d088be46cc5fc6fec650bbf36fd36eeee58acdc0360be405c6158f5137a2a328cd05f0e0

    • SSDEEP

      12288:Hj/kT1PyjoPiAYIvXGtU8VqDPvlZSfpjy/LuYD3Njb0ZM9+LNDiz6vrEFERxv951:D89b7CCuUCjcA6cLvW

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks