Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

4be8ed86e1...18.exe

windows7-x64

7

4be8ed86e1...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4be8ed86e17763d30115400b9bfdb325_JaffaCakes118

  • Size

    298KB

  • Sample

    240715-3n584axfma

  • MD5

    4be8ed86e17763d30115400b9bfdb325

  • SHA1

    e838fb964812f7185a0d4d11373f63cc55b98e05

  • SHA256

    70888da1e4742ba9c39375af1a929736f519e4b7d85ffe5595404f067dcea399

  • SHA512

    da69abf8d9412a1b6c8367c5e6e7fe9fe7edf86439996c9f6cf049d6f0d9a239ab6ea95e305d9ef5c95a70240ee2af2945d992c2a2a4ab12cf8955cbdcb71ceb

  • SSDEEP

    6144:yRHUlXZmcUtyKNVwWJcsf3r1qfw9EYjOUt6f8H0p1SpaFqed:ZmcUtHbcsPpCw+LUkqA1D

Score
7/10
persistence

Malware Config

Targets

    • Target

      4be8ed86e17763d30115400b9bfdb325_JaffaCakes118

    • Size

      298KB

    • MD5

      4be8ed86e17763d30115400b9bfdb325

    • SHA1

      e838fb964812f7185a0d4d11373f63cc55b98e05

    • SHA256

      70888da1e4742ba9c39375af1a929736f519e4b7d85ffe5595404f067dcea399

    • SHA512

      da69abf8d9412a1b6c8367c5e6e7fe9fe7edf86439996c9f6cf049d6f0d9a239ab6ea95e305d9ef5c95a70240ee2af2945d992c2a2a4ab12cf8955cbdcb71ceb

    • SSDEEP

      6144:yRHUlXZmcUtyKNVwWJcsf3r1qfw9EYjOUt6f8H0p1SpaFqed:ZmcUtHbcsPpCw+LUkqA1D

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks