Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

37a9b5fd14...18.exe

windows7-x64

10

37a9b5fd14...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    37a9b5fd14527a3196808a24e8a2fdf2_JaffaCakes118

  • Size

    1.5MB

  • Sample

    240711-etvgsa1cpe

  • MD5

    37a9b5fd14527a3196808a24e8a2fdf2

  • SHA1

    3ba472394a4e4e28e4315eb9872f818719f5a2ce

  • SHA256

    1e1d0f9ff69ba216664d92dc14ca9268ec63c35ade4727b2769448f21a7586fa

  • SHA512

    250bcd888edd769ad71bb02682456a2f3547fde417f093aaade50cc430c2a0a053d95732defa9ec7bb8f8c16ad45a2355aaf51df1ac1969172a6c2291a99bf80

  • SSDEEP

    24576:GHt2e7h2mZN11vQ0bzmPhRgtN0zrzTUEURrVuH8NjWu/tGTfY2Q6w+Pq:qt242mPvQNplPPKRJuclWu/6A9S

Score
10/10
persistence

Malware Config

Targets

    • Target

      37a9b5fd14527a3196808a24e8a2fdf2_JaffaCakes118

    • Size

      1.5MB

    • MD5

      37a9b5fd14527a3196808a24e8a2fdf2

    • SHA1

      3ba472394a4e4e28e4315eb9872f818719f5a2ce

    • SHA256

      1e1d0f9ff69ba216664d92dc14ca9268ec63c35ade4727b2769448f21a7586fa

    • SHA512

      250bcd888edd769ad71bb02682456a2f3547fde417f093aaade50cc430c2a0a053d95732defa9ec7bb8f8c16ad45a2355aaf51df1ac1969172a6c2291a99bf80

    • SSDEEP

      24576:GHt2e7h2mZN11vQ0bzmPhRgtN0zrzTUEURrVuH8NjWu/tGTfY2Q6w+Pq:qt242mPvQNplPPKRJuclWu/6A9S

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks