Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7

5daedb7a50...18.exe

windows7-x64

8

5daedb7a50...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5daedb7a50ffd6bdb2515a37bed8c266_JaffaCakes118

  • Size

    99KB

  • Sample

    240719-z1tt2szenq

  • MD5

    5daedb7a50ffd6bdb2515a37bed8c266

  • SHA1

    c548094c98f4874f649b61f08e79ed4b053d1d9c

  • SHA256

    002218dfeba3bda2b11c2bf68aca6a9fc349aa695815491839e16ae67eab2b92

  • SHA512

    206d0ba7c01530beefa3c6921535c791d933c245300117b56a0cda18e4ae9dcc6bc58e0d6474c97dcd3bdc8bfd6d3788b78d5bcde7d790c185bf77a7f56b9618

  • SSDEEP

    1536:fUpnlrU/rBTprOyNmTJMgwRba9SnX9tEfcp5LTE2f2AxwNuxhgWZ3ejDiZ4TmR8I:qn6/rvOyUwJaktUc/LY02AxPxjemtdlb

Score
8/10
persistencevmprotect

Malware Config

Targets

    • Target

      5daedb7a50ffd6bdb2515a37bed8c266_JaffaCakes118

    • Size

      99KB

    • MD5

      5daedb7a50ffd6bdb2515a37bed8c266

    • SHA1

      c548094c98f4874f649b61f08e79ed4b053d1d9c

    • SHA256

      002218dfeba3bda2b11c2bf68aca6a9fc349aa695815491839e16ae67eab2b92

    • SHA512

      206d0ba7c01530beefa3c6921535c791d933c245300117b56a0cda18e4ae9dcc6bc58e0d6474c97dcd3bdc8bfd6d3788b78d5bcde7d790c185bf77a7f56b9618

    • SSDEEP

      1536:fUpnlrU/rBTprOyNmTJMgwRba9SnX9tEfcp5LTE2f2AxwNuxhgWZ3ejDiZ4TmR8I:qn6/rvOyUwJaktUc/LY02AxPxjemtdlb

    Score
    8/10
    persistencevmprotect

    • Drops file in Drivers directory

    • Server Software Component: Terminal Services DLL

      persistence

    • Deletes itself

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks