Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

244e0b28d9...18.exe

windows7-x64

10

244e0b28d9...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    244e0b28d9e91fa189590f11ce2b3076_JaffaCakes118

  • Size

    100KB

  • Sample

    240704-csn79s1fjg

  • MD5

    244e0b28d9e91fa189590f11ce2b3076

  • SHA1

    88ccdd0daae4a4df772121990c374ac6e2daeddc

  • SHA256

    65c33b54d58702345d035b495c7ee6e85c21722fa866c6d1a19b7625f05d7557

  • SHA512

    660c889453fe3ad8fcbb533ef4b0898d70c858f958ddff6e3577298a4b3e5f2ff030daf57f93804dda649a21193ff38be2ef38a0918112a07bf758442c52fd2c

  • SSDEEP

    1536:WV38iAuismywszLw0wF9MGM9K/oKtNgCMbA1bL3N+NM5UfONIjnZ0x:Wz/KLOM5FCnKx

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      244e0b28d9e91fa189590f11ce2b3076_JaffaCakes118

    • Size

      100KB

    • MD5

      244e0b28d9e91fa189590f11ce2b3076

    • SHA1

      88ccdd0daae4a4df772121990c374ac6e2daeddc

    • SHA256

      65c33b54d58702345d035b495c7ee6e85c21722fa866c6d1a19b7625f05d7557

    • SHA512

      660c889453fe3ad8fcbb533ef4b0898d70c858f958ddff6e3577298a4b3e5f2ff030daf57f93804dda649a21193ff38be2ef38a0918112a07bf758442c52fd2c

    • SSDEEP

      1536:WV38iAuismywszLw0wF9MGM9K/oKtNgCMbA1bL3N+NM5UfONIjnZ0x:Wz/KLOM5FCnKx

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks