Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

3b80d58650...18.exe

windows7-x64

10

3b80d58650...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b80d58650078c92bcb5c7e524350ea7_JaffaCakes118

  • Size

    124KB

  • Sample

    240712-bxap1avhke

  • MD5

    3b80d58650078c92bcb5c7e524350ea7

  • SHA1

    b20e6a795d41d9454c714b76b446cb45bf58ddae

  • SHA256

    4d8b1635216fdda1b97aacd31f8274e794914a526b5b1d448ba996636407ac12

  • SHA512

    63eb0978960b44eb13f349e724acfc3e1197c7780fb1c8e433e71aebbefe096b82c2ff57119aa75e285b7e57269f6ba16b36fa18bf3907ec9ac238ad6aeb6942

  • SSDEEP

    1536:KJtkj7TQZU0GgAJa0P1kNmKldCMhdu8KWP/nTn8nBP9VeRPNeG0h/y:AkjAZU0GgAT9QIq

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3b80d58650078c92bcb5c7e524350ea7_JaffaCakes118

    • Size

      124KB

    • MD5

      3b80d58650078c92bcb5c7e524350ea7

    • SHA1

      b20e6a795d41d9454c714b76b446cb45bf58ddae

    • SHA256

      4d8b1635216fdda1b97aacd31f8274e794914a526b5b1d448ba996636407ac12

    • SHA512

      63eb0978960b44eb13f349e724acfc3e1197c7780fb1c8e433e71aebbefe096b82c2ff57119aa75e285b7e57269f6ba16b36fa18bf3907ec9ac238ad6aeb6942

    • SSDEEP

      1536:KJtkj7TQZU0GgAJa0P1kNmKldCMhdu8KWP/nTn8nBP9VeRPNeG0h/y:AkjAZU0GgAT9QIq

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks