Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

357f183ca1...18.exe

windows7-x64

7

357f183ca1...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    357f183ca1741b4c4eb096fc1581db19_JaffaCakes118

  • Size

    129KB

  • Sample

    240710-txxtmsxfrj

  • MD5

    357f183ca1741b4c4eb096fc1581db19

  • SHA1

    d27ea09a082a3bfca0b7e2182c17588f0a739d29

  • SHA256

    02d6f0eb267f667994da87098c1fb942d07a9487d72a150f2ea9b5e02d3b793a

  • SHA512

    7399fb82fd49f1f60267887ad4a0437e3aa06daa9d6b056f16bfd1d5d2014f6245375a46bc0041400b7e4f8c1560be37f069158d0b858d5264c2ba76f0df8fcc

  • SSDEEP

    3072:ZKeYu+tguObk59eIX1AmUQLgF7A9vKBvc:ZfYHX9e41wQgF89X

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      357f183ca1741b4c4eb096fc1581db19_JaffaCakes118

    • Size

      129KB

    • MD5

      357f183ca1741b4c4eb096fc1581db19

    • SHA1

      d27ea09a082a3bfca0b7e2182c17588f0a739d29

    • SHA256

      02d6f0eb267f667994da87098c1fb942d07a9487d72a150f2ea9b5e02d3b793a

    • SHA512

      7399fb82fd49f1f60267887ad4a0437e3aa06daa9d6b056f16bfd1d5d2014f6245375a46bc0041400b7e4f8c1560be37f069158d0b858d5264c2ba76f0df8fcc

    • SSDEEP

      3072:ZKeYu+tguObk59eIX1AmUQLgF7A9vKBvc:ZfYHX9e41wQgF89X

    Score
    7/10
    persistencespywarestealer

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads WinSCP keys stored on the system

      Tries to access WinSCP stored sessions.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks