Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

3574e242f0...18.exe

windows7-x64

8

3574e242f0...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3574e242f04444c8f074dc14323c17c5_JaffaCakes118

  • Size

    57KB

  • Sample

    240710-tn6eesxckq

  • MD5

    3574e242f04444c8f074dc14323c17c5

  • SHA1

    4263a38c71171eef420d000546c5b119f6e85640

  • SHA256

    dd1484be254b5e4c2037d75a82289e20d9059c2bad7e76ef92b0c6b3c0dad869

  • SHA512

    244d2ab3a1dd61bc20544981b1255a1afab60998c2645e2356d72bbbf63b03bef266c7c9433ff971ca1c9aa834a54d0353e4c5cb5f71ee854014e3f073aeb56e

  • SSDEEP

    768:OFVzMQjM6qLTZIHNmSal8KUor/jewC4H1LSSJB00wNLE9WPry378WaKysZ5b2:OFGQjAK9axUYbD/kLeWPrGJaKysZV2

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      3574e242f04444c8f074dc14323c17c5_JaffaCakes118

    • Size

      57KB

    • MD5

      3574e242f04444c8f074dc14323c17c5

    • SHA1

      4263a38c71171eef420d000546c5b119f6e85640

    • SHA256

      dd1484be254b5e4c2037d75a82289e20d9059c2bad7e76ef92b0c6b3c0dad869

    • SHA512

      244d2ab3a1dd61bc20544981b1255a1afab60998c2645e2356d72bbbf63b03bef266c7c9433ff971ca1c9aa834a54d0353e4c5cb5f71ee854014e3f073aeb56e

    • SSDEEP

      768:OFVzMQjM6qLTZIHNmSal8KUor/jewC4H1LSSJB00wNLE9WPry378WaKysZ5b2:OFGQjAK9axUYbD/kLeWPrGJaKysZV2

    Score
    8/10
    evasionpersistence

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks