Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

3ef580bb31...18.exe

windows7-x64

8

3ef580bb31...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ef580bb31a7a0ecd419e88de1df9a12_JaffaCakes118

  • Size

    124KB

  • Sample

    240712-1dm9es1cpq

  • MD5

    3ef580bb31a7a0ecd419e88de1df9a12

  • SHA1

    451fef47679a39cc218facef5b50c75e8680ac9c

  • SHA256

    2018736eacc9d84fea20d31c2e5e1d1762103fcb9bc86c254c1415cb5b6eee14

  • SHA512

    11b856abc6722381afe41ae141dfcb66cca5bc8531c5bd01f26969757ad347e127b1e0853ed3110696dcf2487b1b329a84f724fa58c16598db535906cab48ee2

  • SSDEEP

    3072:ILNVA/8MGsysgMXU6niwnyTfv/AZW7uPeEgyK+or:YM1GLsjijTfvIZWueHj

Score
8/10
persistence

Malware Config

Targets

    • Target

      3ef580bb31a7a0ecd419e88de1df9a12_JaffaCakes118

    • Size

      124KB

    • MD5

      3ef580bb31a7a0ecd419e88de1df9a12

    • SHA1

      451fef47679a39cc218facef5b50c75e8680ac9c

    • SHA256

      2018736eacc9d84fea20d31c2e5e1d1762103fcb9bc86c254c1415cb5b6eee14

    • SHA512

      11b856abc6722381afe41ae141dfcb66cca5bc8531c5bd01f26969757ad347e127b1e0853ed3110696dcf2487b1b329a84f724fa58c16598db535906cab48ee2

    • SSDEEP

      3072:ILNVA/8MGsysgMXU6niwnyTfv/AZW7uPeEgyK+or:YM1GLsjijTfvIZWueHj

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks