Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

257c34df79...18.exe

windows7-x64

7

257c34df79...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    257c34df795e2b237424efa9a7ba30e1_JaffaCakes118

  • Size

    2.2MB

  • Sample

    240704-lpmppsvbrr

  • MD5

    257c34df795e2b237424efa9a7ba30e1

  • SHA1

    a82ebf53c3e7378f594be9a4143403c416effb30

  • SHA256

    762c797132d0cd89f4f5143b0df8066f4e651f88a599b4e8d695d74e623d7156

  • SHA512

    69ffef47965207be6451c0786999e470cdf684050439d2c1da0f1917e49f9eeed17e872cfd3461d8d8f4d8fec554f1a86dbbf79f81c0c8e08483f7692bfe228f

  • SSDEEP

    24576:VF3t0RF3t0nt1bjJljFjqWvWL0vbahbF2dZXIBzwKdYVjp17LbLfUT:5gSvFJA0vbahbuRKwpBLbLfUT

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      257c34df795e2b237424efa9a7ba30e1_JaffaCakes118

    • Size

      2.2MB

    • MD5

      257c34df795e2b237424efa9a7ba30e1

    • SHA1

      a82ebf53c3e7378f594be9a4143403c416effb30

    • SHA256

      762c797132d0cd89f4f5143b0df8066f4e651f88a599b4e8d695d74e623d7156

    • SHA512

      69ffef47965207be6451c0786999e470cdf684050439d2c1da0f1917e49f9eeed17e872cfd3461d8d8f4d8fec554f1a86dbbf79f81c0c8e08483f7692bfe228f

    • SSDEEP

      24576:VF3t0RF3t0nt1bjJljFjqWvWL0vbahbF2dZXIBzwKdYVjp17LbLfUT:5gSvFJA0vbahbuRKwpBLbLfUT

    Score
    7/10
    persistencespywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks