Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

3a07dd3c31...18.exe

windows7-x64

10

3a07dd3c31...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a07dd3c3102cae3b66a616691b39ca0_JaffaCakes118

  • Size

    397KB

  • Sample

    240711-vq1sdswdkq

  • MD5

    3a07dd3c3102cae3b66a616691b39ca0

  • SHA1

    f5352fe5a8ab47f0dff31bd89c295b63ee5bfd51

  • SHA256

    d018bb082d0d768a09a8259bac61bea1f356476ecc3242107ab8241e7cb5fea0

  • SHA512

    194770ebe7633a53ad0cfbd7f8e76f6a5e2d3519891e877a407d7902e8a5f4581fea3869642efb5646bb90665116ea216d04aefb3a90a81eea6ecb96fb772b0b

  • SSDEEP

    12288:yk1Z/NVy6ixxrno8nDzu8MOH8qLsAQsnY:3NVixtDzIOHLTnY

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3a07dd3c3102cae3b66a616691b39ca0_JaffaCakes118

    • Size

      397KB

    • MD5

      3a07dd3c3102cae3b66a616691b39ca0

    • SHA1

      f5352fe5a8ab47f0dff31bd89c295b63ee5bfd51

    • SHA256

      d018bb082d0d768a09a8259bac61bea1f356476ecc3242107ab8241e7cb5fea0

    • SHA512

      194770ebe7633a53ad0cfbd7f8e76f6a5e2d3519891e877a407d7902e8a5f4581fea3869642efb5646bb90665116ea216d04aefb3a90a81eea6ecb96fb772b0b

    • SSDEEP

      12288:yk1Z/NVy6ixxrno8nDzu8MOH8qLsAQsnY:3NVixtDzIOHLTnY

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Drops file in Drivers directory

    • Manipulates Digital Signatures

      Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks