Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2f470cbeac...18.exe

windows7-x64

7

2f470cbeac...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2f470cbeacd0e24f1f484ae61da88919_JaffaCakes118

  • Size

    47KB

  • Sample

    240709-g3hwfssdne

  • MD5

    2f470cbeacd0e24f1f484ae61da88919

  • SHA1

    090e62fddb7a56f6af6536c64a18dbbdd5aa6f06

  • SHA256

    3191fd056adc16715bea757a4c7050bc25f032cfc699eb06be768713d867a7e6

  • SHA512

    bf8a30defee0181a6c293f84d6e41ba8e278e5041727cede33d48ea53a5498bba22c444679d9ab2c31de7eec6169e5a0d0c5b978ff73293a06a71593be7e2d29

  • SSDEEP

    768:QEy3/0+MF+pyXTtMTQiBtVxHPr5bRftmYIZ4n45J+OOqVhRTlazUR:Q13/KgpGtGQ4DHPrlRFaG45J+EhRhN

Score
7/10
persistence

Malware Config

Targets

    • Target

      2f470cbeacd0e24f1f484ae61da88919_JaffaCakes118

    • Size

      47KB

    • MD5

      2f470cbeacd0e24f1f484ae61da88919

    • SHA1

      090e62fddb7a56f6af6536c64a18dbbdd5aa6f06

    • SHA256

      3191fd056adc16715bea757a4c7050bc25f032cfc699eb06be768713d867a7e6

    • SHA512

      bf8a30defee0181a6c293f84d6e41ba8e278e5041727cede33d48ea53a5498bba22c444679d9ab2c31de7eec6169e5a0d0c5b978ff73293a06a71593be7e2d29

    • SSDEEP

      768:QEy3/0+MF+pyXTtMTQiBtVxHPr5bRftmYIZ4n45J+OOqVhRTlazUR:Q13/KgpGtGQ4DHPrlRFaG45J+EhRhN

    Score
    7/10
    persistence

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks