Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

4931bfa03b...18.exe

windows7-x64

8

4931bfa03b...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4931bfa03b011b1d5b0b0f8dfd4a8116_JaffaCakes118

  • Size

    4.3MB

  • Sample

    240715-ld3xjszall

  • MD5

    4931bfa03b011b1d5b0b0f8dfd4a8116

  • SHA1

    ec6c20b828d0517db89f03c3335bbc839b58ef0e

  • SHA256

    ca9a3481656a749870c13d58d50a90d3e91dfb5f0324253261e699a76fd82697

  • SHA512

    8ad31f059e16e33cbf82182193130bdea9f65ed775c57462242f1ce39afa74e48d3f4a63a2050f88f161d8ef43cca63a020e0f40577046aced5d2912a10654d7

  • SSDEEP

    98304:WvoweBT2dUM9dIeLEyZllU4IZCVmnQocVUf82Vxuut+fmV0RgL/UG8SAOmf:WgfBx2GeQiO4IZC/9VUrzzt+fmaSMVS2

Score
8/10
evasionexecutionpersistence

Malware Config

Targets

    • Target

      4931bfa03b011b1d5b0b0f8dfd4a8116_JaffaCakes118

    • Size

      4.3MB

    • MD5

      4931bfa03b011b1d5b0b0f8dfd4a8116

    • SHA1

      ec6c20b828d0517db89f03c3335bbc839b58ef0e

    • SHA256

      ca9a3481656a749870c13d58d50a90d3e91dfb5f0324253261e699a76fd82697

    • SHA512

      8ad31f059e16e33cbf82182193130bdea9f65ed775c57462242f1ce39afa74e48d3f4a63a2050f88f161d8ef43cca63a020e0f40577046aced5d2912a10654d7

    • SSDEEP

      98304:WvoweBT2dUM9dIeLEyZllU4IZCVmnQocVUf82Vxuut+fmV0RgL/UG8SAOmf:WgfBx2GeQiO4IZC/9VUrzzt+fmaSMVS2

    Score
    8/10
    evasionexecutionpersistence

    • Stops running service(s)

      evasionexecution

    • Uses Session Manager for persistence

      Creates Session Manager registry key to run executable early in system boot.

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks