Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

35a9e3691a...18.exe

windows7-x64

10

35a9e3691a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    35a9e3691a121e9d02a7465d3f57e697_JaffaCakes118

  • Size

    276KB

  • Sample

    240710-vwzsaazdpl

  • MD5

    35a9e3691a121e9d02a7465d3f57e697

  • SHA1

    1ecf5a5e401938938c1c48d94299be0b4da3346b

  • SHA256

    0bc8301f92ca6ff61ac8ff88b53e0ec12b9ac4ee2c94811cd433d19cd8e2833b

  • SHA512

    812056603e7394746d8096623b487ecd168633d6a5567cdef947b3b80dbf5bc4f44aaa7a79563febe73aad4cc494997885c64223a6daad1eb5c275657b2ed749

  • SSDEEP

    6144:tgJDJJPCDMzJu749QepWyBLTURx44IhR0:tlwzJuZeseLTUR6m

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      35a9e3691a121e9d02a7465d3f57e697_JaffaCakes118

    • Size

      276KB

    • MD5

      35a9e3691a121e9d02a7465d3f57e697

    • SHA1

      1ecf5a5e401938938c1c48d94299be0b4da3346b

    • SHA256

      0bc8301f92ca6ff61ac8ff88b53e0ec12b9ac4ee2c94811cd433d19cd8e2833b

    • SHA512

      812056603e7394746d8096623b487ecd168633d6a5567cdef947b3b80dbf5bc4f44aaa7a79563febe73aad4cc494997885c64223a6daad1eb5c275657b2ed749

    • SSDEEP

      6144:tgJDJJPCDMzJu749QepWyBLTURx44IhR0:tlwzJuZeseLTUR6m

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks