Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

2b4da6abc8...18.exe

windows7-x64

2b4da6abc8...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2b4da6abc83db74fcfc5504854ad810f_JaffaCakes118

  • Size

    104KB

  • Sample

    240708-g71baswgnj

  • MD5

    2b4da6abc83db74fcfc5504854ad810f

  • SHA1

    adb585f882a4e19136d31bad7dc3c1abe77c2138

  • SHA256

    8d5ba59f3eaf7666ab0574c796e474a1a6c44d7d2f302f9edc13982e3504b70d

  • SHA512

    717367e73cc529c3366cc089ba5a41bc344e91fbbd5c57cedafb6cf8e7c1916e5ac3152aa7cc71918aab908dbc2dd77f84ab72e2d72ff574d00dd19671ae0a23

  • SSDEEP

    1536:ofWIQ92rj1mMf9+N2+TlNPVxjct/W4c0MexnLFVhLxKceu+nBgyoDPj6mQ:Gw9sp1r+hNdxctXxZVhtebBgyoD0

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      2b4da6abc83db74fcfc5504854ad810f_JaffaCakes118

    • Size

      104KB

    • MD5

      2b4da6abc83db74fcfc5504854ad810f

    • SHA1

      adb585f882a4e19136d31bad7dc3c1abe77c2138

    • SHA256

      8d5ba59f3eaf7666ab0574c796e474a1a6c44d7d2f302f9edc13982e3504b70d

    • SHA512

      717367e73cc529c3366cc089ba5a41bc344e91fbbd5c57cedafb6cf8e7c1916e5ac3152aa7cc71918aab908dbc2dd77f84ab72e2d72ff574d00dd19671ae0a23

    • SSDEEP

      1536:ofWIQ92rj1mMf9+N2+TlNPVxjct/W4c0MexnLFVhLxKceu+nBgyoDPj6mQ:Gw9sp1r+hNdxctXxZVhtebBgyoD0

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks