Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

298bc1c3e8...18.exe

windows7-x64

7

298bc1c3e8...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    298bc1c3e89daa11a16109ff174055db_JaffaCakes118

  • Size

    396KB

  • Sample

    240706-2562aaydrg

  • MD5

    298bc1c3e89daa11a16109ff174055db

  • SHA1

    c0baef8fe380b1cc3d87975755556a6270f27e22

  • SHA256

    414c126b6c0e0a5e00672a9688101c2956784e8e2e4504f34e3e00ba4b027724

  • SHA512

    c63f8185aa973a59d09111871cf9131d52a1bac20c314e4f3ab9d60945f3966f55eb1d839d0669e7a1487f640ca3353a04880c1a0b0546fc2b114e15cc9f343d

  • SSDEEP

    6144:RbL+vSAhC15fc5t0j5Wc6lLvdwZrvvLNqd/UIPK+N9aFsQqwNj2xlxoqKtEMrzXa:5P1mEWflBwNvvJCXy+N8QzdMrzReDz

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      298bc1c3e89daa11a16109ff174055db_JaffaCakes118

    • Size

      396KB

    • MD5

      298bc1c3e89daa11a16109ff174055db

    • SHA1

      c0baef8fe380b1cc3d87975755556a6270f27e22

    • SHA256

      414c126b6c0e0a5e00672a9688101c2956784e8e2e4504f34e3e00ba4b027724

    • SHA512

      c63f8185aa973a59d09111871cf9131d52a1bac20c314e4f3ab9d60945f3966f55eb1d839d0669e7a1487f640ca3353a04880c1a0b0546fc2b114e15cc9f343d

    • SSDEEP

      6144:RbL+vSAhC15fc5t0j5Wc6lLvdwZrvvLNqd/UIPK+N9aFsQqwNj2xlxoqKtEMrzXa:5P1mEWflBwNvvJCXy+N8QzdMrzReDz

    Score
    7/10
    persistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks