Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

35d65e8ba0...18.exe

windows7-x64

10

35d65e8ba0...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    35d65e8ba035d263fbeef1f3c3caa2ce_JaffaCakes118

  • Size

    148KB

  • Sample

    240710-wwac3avdnh

  • MD5

    35d65e8ba035d263fbeef1f3c3caa2ce

  • SHA1

    48ed94ccf712f729afa50ba05118dc946310dd6c

  • SHA256

    6319505a01ccd92df083f5b8a84b9063618b607012798fef855166c637d7ad1d

  • SHA512

    3a977c47f1dd128976cf5ea9b2a3c2ee6693ad3ac0b368e89459d17024f534c84a67e8adab71c04223dd4bfa0ffb87dff0c1f5ed42349fb01c13e75b1bfc09b5

  • SSDEEP

    3072:Odo+QgRs59j/pvkqBBac+RAGq1bg7Yfgst6OzOS79pNRZkhQJAOAU4oQZiEr0vJ:kodbj/pvkqBBac+RAGq1bZHtrzOS77Xb

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      35d65e8ba035d263fbeef1f3c3caa2ce_JaffaCakes118

    • Size

      148KB

    • MD5

      35d65e8ba035d263fbeef1f3c3caa2ce

    • SHA1

      48ed94ccf712f729afa50ba05118dc946310dd6c

    • SHA256

      6319505a01ccd92df083f5b8a84b9063618b607012798fef855166c637d7ad1d

    • SHA512

      3a977c47f1dd128976cf5ea9b2a3c2ee6693ad3ac0b368e89459d17024f534c84a67e8adab71c04223dd4bfa0ffb87dff0c1f5ed42349fb01c13e75b1bfc09b5

    • SSDEEP

      3072:Odo+QgRs59j/pvkqBBac+RAGq1bg7Yfgst6OzOS79pNRZkhQJAOAU4oQZiEr0vJ:kodbj/pvkqBBac+RAGq1bZHtrzOS77Xb

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks