Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

30a0d0ad32...18.exe

windows7-x64

10

30a0d0ad32...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    30a0d0ad327dbd6eb357340ca2a4d070_JaffaCakes118

  • Size

    194KB

  • Sample

    240709-q3wxraycmf

  • MD5

    30a0d0ad327dbd6eb357340ca2a4d070

  • SHA1

    ab9eb24a04947829cb1a20b713fef68b382dd5cf

  • SHA256

    6d4063c67b3e48c5cdec1abeb817303276e4e7fd6f4b83bda44aaf98d8892d5d

  • SHA512

    6933306b38b526c6d217f021b8b91921faa6c802c3d72bc7264046a7056094f8fb388f5d230d1e9a200a2e454fe2afeb7b3fe69731ae224febd424433cf2e699

  • SSDEEP

    768:t3oMR3uhk1JrYYE0R2+tlH3Zp9nWU71VQz0XVE8IWtpx3nKBtJR2dic9ZXgixvqB:RZufypfBHFg2wlQiNd

Score
10/10
xtremeratpersistenceratspyware

Malware Config

Targets

    • Target

      30a0d0ad327dbd6eb357340ca2a4d070_JaffaCakes118

    • Size

      194KB

    • MD5

      30a0d0ad327dbd6eb357340ca2a4d070

    • SHA1

      ab9eb24a04947829cb1a20b713fef68b382dd5cf

    • SHA256

      6d4063c67b3e48c5cdec1abeb817303276e4e7fd6f4b83bda44aaf98d8892d5d

    • SHA512

      6933306b38b526c6d217f021b8b91921faa6c802c3d72bc7264046a7056094f8fb388f5d230d1e9a200a2e454fe2afeb7b3fe69731ae224febd424433cf2e699

    • SSDEEP

      768:t3oMR3uhk1JrYYE0R2+tlH3Zp9nWU71VQz0XVE8IWtpx3nKBtJR2dic9ZXgixvqB:RZufypfBHFg2wlQiNd

    Score
    10/10
    xtremeratpersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks