Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

448ec9c386...18.exe

windows7-x64

10

448ec9c386...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    448ec9c38690ce618473fed0eb431280_JaffaCakes118

  • Size

    73KB

  • Sample

    240714-ghadksydmm

  • MD5

    448ec9c38690ce618473fed0eb431280

  • SHA1

    61038b25e848b28efe8bd5190711588b97446139

  • SHA256

    e6f282a0d1fb2313d9810852224e5828b537f40455a7f2c13479f8be2394d97b

  • SHA512

    1713a0d689deb4e2f6f7981c7819013736697e4411deb3cb1952fe938b92e1fe0c223f0835bf4013278339b8490a7378bb03ae89899631adfa68a8e70bd4b080

  • SSDEEP

    1536:kkE2qsRSSkJ5oFq8Dm+Q3WAoxnrPgd+qJdQGWUFo7c:kkE2qsRSSkoHmmn7lqPr

Score
10/10
persistence

Malware Config

Targets

    • Target

      448ec9c38690ce618473fed0eb431280_JaffaCakes118

    • Size

      73KB

    • MD5

      448ec9c38690ce618473fed0eb431280

    • SHA1

      61038b25e848b28efe8bd5190711588b97446139

    • SHA256

      e6f282a0d1fb2313d9810852224e5828b537f40455a7f2c13479f8be2394d97b

    • SHA512

      1713a0d689deb4e2f6f7981c7819013736697e4411deb3cb1952fe938b92e1fe0c223f0835bf4013278339b8490a7378bb03ae89899631adfa68a8e70bd4b080

    • SSDEEP

      1536:kkE2qsRSSkJ5oFq8Dm+Q3WAoxnrPgd+qJdQGWUFo7c:kkE2qsRSSkoHmmn7lqPr

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks