Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7

349259ff43...18.exe

windows7-x64

8

349259ff43...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    349259ff438d67fc8f35dbb26e544424_JaffaCakes118

  • Size

    121KB

  • Sample

    240710-nt2ersxfpe

  • MD5

    349259ff438d67fc8f35dbb26e544424

  • SHA1

    c85f6a656c2d8e779e8ddd6f2900688e4967f547

  • SHA256

    dbab0ccceab58e506706fd5e4fd5d68b07331cb586c0e20f608655f738e1352d

  • SHA512

    62222b1b28ea54363563ca3b8c063189434d71745d0d9d48c87cf561edd82c1d251300cc5f82ec5987b0bd346e207825347ba58795f98ebed267f083050ef772

  • SSDEEP

    3072:f5wpiToKK4ddhRJQPRrjvMpRn2ON9jdw/n4XAEVoutV:r6idpqF6Rn2pCACoS

Score
8/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      349259ff438d67fc8f35dbb26e544424_JaffaCakes118

    • Size

      121KB

    • MD5

      349259ff438d67fc8f35dbb26e544424

    • SHA1

      c85f6a656c2d8e779e8ddd6f2900688e4967f547

    • SHA256

      dbab0ccceab58e506706fd5e4fd5d68b07331cb586c0e20f608655f738e1352d

    • SHA512

      62222b1b28ea54363563ca3b8c063189434d71745d0d9d48c87cf561edd82c1d251300cc5f82ec5987b0bd346e207825347ba58795f98ebed267f083050ef772

    • SSDEEP

      3072:f5wpiToKK4ddhRJQPRrjvMpRn2ON9jdw/n4XAEVoutV:r6idpqF6Rn2pCACoS

    Score
    8/10
    discoverypersistenceupx

    • Drops file in Drivers directory

    • Sets service image path in registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks