Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

3c3d3491c0...18.exe

windows7-x64

10

3c3d3491c0...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c3d3491c0df9d18ec8ab796f352a024_JaffaCakes118

  • Size

    54KB

  • Sample

    240712-gs5bpstdrb

  • MD5

    3c3d3491c0df9d18ec8ab796f352a024

  • SHA1

    4c3592f34cc57f89ebf688262a2544458f9bd264

  • SHA256

    c720b6bf063c000c35b90ecfed4ec7df949f76d4eadd12857d66796af1396dd7

  • SHA512

    34277b98f40249576df73be350d485fbcd9de2cac5f49b2f75e6d96c0ec5968145c0ec71ec75af7cd8ef3337b98e08902d7cd8b26ba0b6d08903f3070efbd1e6

  • SSDEEP

    768:Oe3PFaDVyOQgljLDKRJyM3BmsHzSB4us/wJJapg4RoSMZeUZB/iPhPYUgvpMLCG:V3cpyORJLuB4P4AJJv4Romu/cBYdBo5

Score
10/10
evasion

Malware Config

Targets

    • Target

      3c3d3491c0df9d18ec8ab796f352a024_JaffaCakes118

    • Size

      54KB

    • MD5

      3c3d3491c0df9d18ec8ab796f352a024

    • SHA1

      4c3592f34cc57f89ebf688262a2544458f9bd264

    • SHA256

      c720b6bf063c000c35b90ecfed4ec7df949f76d4eadd12857d66796af1396dd7

    • SHA512

      34277b98f40249576df73be350d485fbcd9de2cac5f49b2f75e6d96c0ec5968145c0ec71ec75af7cd8ef3337b98e08902d7cd8b26ba0b6d08903f3070efbd1e6

    • SSDEEP

      768:Oe3PFaDVyOQgljLDKRJyM3BmsHzSB4us/wJJapg4RoSMZeUZB/iPhPYUgvpMLCG:V3cpyORJLuB4P4AJJv4Romu/cBYdBo5

    Score
    10/10
    evasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks