Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

387389a494...18.exe

windows7-x64

10

387389a494...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    387389a4940f58dcc549ed7ae25f93d7_JaffaCakes118

  • Size

    132KB

  • Sample

    240711-kq4tyayfmj

  • MD5

    387389a4940f58dcc549ed7ae25f93d7

  • SHA1

    97a79bf39e41bbbbd8197504b26791d675bad5f3

  • SHA256

    8d8c416ebaf747304e3a40a38d1fc7a1b9d53e7b746a2c4dd8ad18f807abebaa

  • SHA512

    1b0fa264a03f10491e7d0b96030702862331821cf6eb96b6ce396cd06bd774824e6e3fd0a486b54afa2dc5c5ef09ef694fe2c35a153dc5790a937ef764a725e3

  • SSDEEP

    1536:cqm4e/T8H6rM2qEbBkIvI4DyQDIws/HmmYbRdfuL0wo7JaS1:te/T8H63qEbBkn4e2s/HmlTfdwQL

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      387389a4940f58dcc549ed7ae25f93d7_JaffaCakes118

    • Size

      132KB

    • MD5

      387389a4940f58dcc549ed7ae25f93d7

    • SHA1

      97a79bf39e41bbbbd8197504b26791d675bad5f3

    • SHA256

      8d8c416ebaf747304e3a40a38d1fc7a1b9d53e7b746a2c4dd8ad18f807abebaa

    • SHA512

      1b0fa264a03f10491e7d0b96030702862331821cf6eb96b6ce396cd06bd774824e6e3fd0a486b54afa2dc5c5ef09ef694fe2c35a153dc5790a937ef764a725e3

    • SSDEEP

      1536:cqm4e/T8H6rM2qEbBkIvI4DyQDIws/HmmYbRdfuL0wo7JaS1:te/T8H63qEbBkn4e2s/HmlTfdwQL

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks