Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

4c77dc9422...18.exe

windows7-x64

8

4c77dc9422...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4c77dc9422e6a10a5d665fddd28dc6de_JaffaCakes118

  • Size

    164KB

  • Sample

    240716-c6al2a1epr

  • MD5

    4c77dc9422e6a10a5d665fddd28dc6de

  • SHA1

    d634b9115c12a647572fa41310db0d527c1c43a4

  • SHA256

    0f64ae6002a31ccf74595b02abe8d234c27908f5cc053f4badee69bb42b496c4

  • SHA512

    5c69ea9943aa21ae2713346184cea3d9fc3dd5345185ccf2fc2cad23d7df3784d11ef2ef5d0aea6dbd46c27121982e4ad058b030860819228bb9ac3ab5ab2413

  • SSDEEP

    3072:1qpMJFLXBpNum6V0P60/KV69R1Vu8ljAE+cQqCdXe8hTJI:1qGvN4V0Pt9R1Vu8l0B9e8hTi

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      4c77dc9422e6a10a5d665fddd28dc6de_JaffaCakes118

    • Size

      164KB

    • MD5

      4c77dc9422e6a10a5d665fddd28dc6de

    • SHA1

      d634b9115c12a647572fa41310db0d527c1c43a4

    • SHA256

      0f64ae6002a31ccf74595b02abe8d234c27908f5cc053f4badee69bb42b496c4

    • SHA512

      5c69ea9943aa21ae2713346184cea3d9fc3dd5345185ccf2fc2cad23d7df3784d11ef2ef5d0aea6dbd46c27121982e4ad058b030860819228bb9ac3ab5ab2413

    • SSDEEP

      3072:1qpMJFLXBpNum6V0P60/KV69R1Vu8ljAE+cQqCdXe8hTJI:1qGvN4V0Pt9R1Vu8l0B9e8hTi

    Score
    8/10
    evasionpersistence

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks