Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

5b6a31d482...18.exe

windows7-x64

10

5b6a31d482...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b6a31d4822112c88214dd439ec13f2d_JaffaCakes118

  • Size

    342KB

  • Sample

    240719-lrdvksvblm

  • MD5

    5b6a31d4822112c88214dd439ec13f2d

  • SHA1

    7b52d44badd7f2a335b320230a1d2a095b0fbc61

  • SHA256

    b103a0f266c4b897438829a91adf28ad14abb68cec09b25a44f6d520f38475b9

  • SHA512

    394c7f50c92a39601294f0fa7b2fbe2f58024851dcb5d36c1ba23e311085ee7f4150482d63d3b25d882b0111b9a8733b42dbbe8c91363d176b9596886c7f3c24

  • SSDEEP

    6144:3+tNYveIk44ai9PakfDYtlUKS2pf/xYLcu5NC9wXMq0jKI/gvMs4VN:IYvDsakbClM2pxYB3CuM/x2M

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      5b6a31d4822112c88214dd439ec13f2d_JaffaCakes118

    • Size

      342KB

    • MD5

      5b6a31d4822112c88214dd439ec13f2d

    • SHA1

      7b52d44badd7f2a335b320230a1d2a095b0fbc61

    • SHA256

      b103a0f266c4b897438829a91adf28ad14abb68cec09b25a44f6d520f38475b9

    • SHA512

      394c7f50c92a39601294f0fa7b2fbe2f58024851dcb5d36c1ba23e311085ee7f4150482d63d3b25d882b0111b9a8733b42dbbe8c91363d176b9596886c7f3c24

    • SSDEEP

      6144:3+tNYveIk44ai9PakfDYtlUKS2pf/xYLcu5NC9wXMq0jKI/gvMs4VN:IYvDsakbClM2pxYB3CuM/x2M

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks