27b1f51d75c91979cacec43c28940bdd8ec70958d4f3717236945e871317d429 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

3f17fe39c3...18.exe

windows7-x64

7

3f17fe39c3...18.exe

windows10-2004-x64

7

Sharing

General

Target

3f17fe39c3750cf36e00d02ed92d049e_JaffaCakes118
Size

21KB
Sample

240712-18p2hasfrp
MD5

3f17fe39c3750cf36e00d02ed92d049e
SHA1

4e68c3eb16e855cc4fb5b5990f372fce01753390
SHA256

27b1f51d75c91979cacec43c28940bdd8ec70958d4f3717236945e871317d429
SHA512

f5f998d6effe21444201e73474fd303276e229061b6ed115545c7344b03f260bbc43241607f6cef476ea7de45ba511e7f591df4e06ff03b532a73f9fac3f95ce
SSDEEP

384:SIiV728hUQ7Y2P/cVEccDdye7kjlWLe7grPiA8jyrMPhTjanbBoZvp1HOaNJawcV:SRGuY2P0Vo6r7SiAwyrMRjbBHfnbcuyM

Score

7^/10

persistence upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

3f17fe39c3750cf36e00d02ed92d049e_JaffaCakes118.exe

Resource

win7-20240705-en

persistence upx

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

3f17fe39c3750cf36e00d02ed92d049e_JaffaCakes118.exe

Resource

win10v2004-20240704-en

persistence upx

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  3f17fe39c3750cf36e00d02ed92d049e_JaffaCakes118
- Size
  
  21KB
- MD5
  
  3f17fe39c3750cf36e00d02ed92d049e
- SHA1
  
  4e68c3eb16e855cc4fb5b5990f372fce01753390
- SHA256
  
  27b1f51d75c91979cacec43c28940bdd8ec70958d4f3717236945e871317d429
- SHA512
  
  f5f998d6effe21444201e73474fd303276e229061b6ed115545c7344b03f260bbc43241607f6cef476ea7de45ba511e7f591df4e06ff03b532a73f9fac3f95ce
- SSDEEP
  
  384:SIiV728hUQ7Y2P/cVEccDdye7kjlWLe7grPiA8jyrMPhTjanbBoZvp1HOaNJawcV:SRGuY2P0Vo6r7SiAwyrMRjbBHfnbcuyM
Score

7^/10

persistence upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.