Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

451a9cd207...18.exe

windows7-x64

10

451a9cd207...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    451a9cd207859b3979382e6199147a0e_JaffaCakes118

  • Size

    215KB

  • Sample

    240714-kprg8awdqf

  • MD5

    451a9cd207859b3979382e6199147a0e

  • SHA1

    45a242afae42dfb5c745faa137c3c16c500dced0

  • SHA256

    600539e89df5ae54feb7da494233c2f6cccb1813d661f65ef3e65785acd616f7

  • SHA512

    ba17c624927a7858b1b1f44c07f2f837437e60216ef5c81126e1821f2fb6755192e06f4ac12476f89f8101f37f97b7c6c14be3d52a83d026e07b868fbbaf4111

  • SSDEEP

    3072:C29xzP53PWwnzelxEA8rFHlC9AdgXfaiH+9OBlPl4kGrn:nF/RerEA8BH/dg1H+017q

Score
10/10
ramnitbankerevasionspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      451a9cd207859b3979382e6199147a0e_JaffaCakes118

    • Size

      215KB

    • MD5

      451a9cd207859b3979382e6199147a0e

    • SHA1

      45a242afae42dfb5c745faa137c3c16c500dced0

    • SHA256

      600539e89df5ae54feb7da494233c2f6cccb1813d661f65ef3e65785acd616f7

    • SHA512

      ba17c624927a7858b1b1f44c07f2f837437e60216ef5c81126e1821f2fb6755192e06f4ac12476f89f8101f37f97b7c6c14be3d52a83d026e07b868fbbaf4111

    • SSDEEP

      3072:C29xzP53PWwnzelxEA8rFHlC9AdgXfaiH+9OBlPl4kGrn:nF/RerEA8BH/dg1H+017q

    Score
    10/10
    ramnitbankerspywarestealertrojanupxwormevasion

    • Modifies firewall policy service

      evasion

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks