Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

410f049a79...18.exe

windows7-x64

10

410f049a79...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    410f049a796bc67d1458c178b2c36487_JaffaCakes118

  • Size

    136KB

  • Sample

    240713-k46wfsvdll

  • MD5

    410f049a796bc67d1458c178b2c36487

  • SHA1

    34cfe849caee623422b00a583ab1e31a97af9084

  • SHA256

    87347b4a7cc5551fcaf812ba0bad99ddc24df5ba995cf8c4ab867b1d5953078e

  • SHA512

    bd385968113e0f517859c14b37ec1df2e9976919aa81715ff5e2834d2047adca116ed97d41686739b49bfed56baa96a6b7c02d7d787e6f51757311d2a7868763

  • SSDEEP

    3072:PpvJovvXFwRBW1cQoj9MYuPCNtrK6tJTVUa37KiCg:Tu/d2QRYjfTVU4Ki

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      410f049a796bc67d1458c178b2c36487_JaffaCakes118

    • Size

      136KB

    • MD5

      410f049a796bc67d1458c178b2c36487

    • SHA1

      34cfe849caee623422b00a583ab1e31a97af9084

    • SHA256

      87347b4a7cc5551fcaf812ba0bad99ddc24df5ba995cf8c4ab867b1d5953078e

    • SHA512

      bd385968113e0f517859c14b37ec1df2e9976919aa81715ff5e2834d2047adca116ed97d41686739b49bfed56baa96a6b7c02d7d787e6f51757311d2a7868763

    • SSDEEP

      3072:PpvJovvXFwRBW1cQoj9MYuPCNtrK6tJTVUa37KiCg:Tu/d2QRYjfTVU4Ki

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks