Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2a5c218fc3...18.exe

windows7-x64

10

2a5c218fc3...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a5c218fc314acf08edb42c6fcef17cc_JaffaCakes118

  • Size

    124KB

  • Sample

    240708-axdk8awdqa

  • MD5

    2a5c218fc314acf08edb42c6fcef17cc

  • SHA1

    a11e74bff4c333f94546ffe5d47d970b5bf32fb9

  • SHA256

    3c019ab04c58630d75927a4d025d103fc1b903924b8583ad35142d9d3690d705

  • SHA512

    de1d9739d43151843cf0a425681bf2dc4e482bee99ee0c10780fb1d7ec43fcf78409c76c8f3db822d1f08833dbddc57fd934f0beb2752670b66c6f14b1284ac4

  • SSDEEP

    1536:Kktkj3TQNU0GgAJa0P1kNmKldCMhdu8KWP/nTn8nBP9VeUrNeG0h/o:5kjENU0GgAT9xkg

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2a5c218fc314acf08edb42c6fcef17cc_JaffaCakes118

    • Size

      124KB

    • MD5

      2a5c218fc314acf08edb42c6fcef17cc

    • SHA1

      a11e74bff4c333f94546ffe5d47d970b5bf32fb9

    • SHA256

      3c019ab04c58630d75927a4d025d103fc1b903924b8583ad35142d9d3690d705

    • SHA512

      de1d9739d43151843cf0a425681bf2dc4e482bee99ee0c10780fb1d7ec43fcf78409c76c8f3db822d1f08833dbddc57fd934f0beb2752670b66c6f14b1284ac4

    • SSDEEP

      1536:Kktkj3TQNU0GgAJa0P1kNmKldCMhdu8KWP/nTn8nBP9VeUrNeG0h/o:5kjENU0GgAT9xkg

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks