Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

49660e1783...18.exe

windows7-x64

7

49660e1783...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    49660e17835b10091fe60697d0674c00_JaffaCakes118

  • Size

    284KB

  • Sample

    240715-mkk6ravcka

  • MD5

    49660e17835b10091fe60697d0674c00

  • SHA1

    a8e298bf05aba4ddfb6941c9d6a34c80dd25329a

  • SHA256

    0289fc4fce80c9ed77f8bbd0a997ad9447dda268bd4a438d739283a73cf4aa4f

  • SHA512

    b95149172e39e93b0eb718b94676b0224ecd6182df9c756f0691fc33c9d73f6e9ccfc80b43e46768ae6e73ff45a9f6e259eac5b53b503567f1225ce289eaaf48

  • SSDEEP

    6144:DNq6AU17HPwmDDANk9eAMezB8Tu4+4lAGK9gGSwDoc6m:DM6AU17HB19Z3Lgm

Score
7/10
persistence

Malware Config

Targets

    • Target

      49660e17835b10091fe60697d0674c00_JaffaCakes118

    • Size

      284KB

    • MD5

      49660e17835b10091fe60697d0674c00

    • SHA1

      a8e298bf05aba4ddfb6941c9d6a34c80dd25329a

    • SHA256

      0289fc4fce80c9ed77f8bbd0a997ad9447dda268bd4a438d739283a73cf4aa4f

    • SHA512

      b95149172e39e93b0eb718b94676b0224ecd6182df9c756f0691fc33c9d73f6e9ccfc80b43e46768ae6e73ff45a9f6e259eac5b53b503567f1225ce289eaaf48

    • SSDEEP

      6144:DNq6AU17HPwmDDANk9eAMezB8Tu4+4lAGK9gGSwDoc6m:DM6AU17HB19Z3Lgm

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks