Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2c36dee52b...18.exe

windows7-x64

10

2c36dee52b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c36dee52b5569487dfc2ecda8a37973_JaffaCakes118

  • Size

    536KB

  • Sample

    240708-nwxvcsxcrq

  • MD5

    2c36dee52b5569487dfc2ecda8a37973

  • SHA1

    135a70de10cad4c248f90b8c07476193f7256329

  • SHA256

    1488c871975eb6f742fc9ca0d152fe3cc310feef4d025ad558cc10b70d9b9319

  • SHA512

    0d7a8464442d25a7bfbfb7ceb766578a1ad68bae895f8dca457e9aece346f70615f6bc7a2faab899d842b3795f3083b0d32ab1b994f547892e8ae3b726db91e4

  • SSDEEP

    12288:nLNcH/Xwu/sro3X5Azmgh1R3/n0aRz6mHGP:nO/wu/p3X5emghH/0wzdHe

Score
10/10
persistence

Malware Config

Targets

    • Target

      2c36dee52b5569487dfc2ecda8a37973_JaffaCakes118

    • Size

      536KB

    • MD5

      2c36dee52b5569487dfc2ecda8a37973

    • SHA1

      135a70de10cad4c248f90b8c07476193f7256329

    • SHA256

      1488c871975eb6f742fc9ca0d152fe3cc310feef4d025ad558cc10b70d9b9319

    • SHA512

      0d7a8464442d25a7bfbfb7ceb766578a1ad68bae895f8dca457e9aece346f70615f6bc7a2faab899d842b3795f3083b0d32ab1b994f547892e8ae3b726db91e4

    • SSDEEP

      12288:nLNcH/Xwu/sro3X5Azmgh1R3/n0aRz6mHGP:nO/wu/p3X5emghH/0wzdHe

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks