Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

5e50674fc2...18.exe

windows7-x64

7

5e50674fc2...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5e50674fc2ca3eff46bed2e9cc3a11e1_JaffaCakes118

  • Size

    134KB

  • Sample

    240720-aqawraxgln

  • MD5

    5e50674fc2ca3eff46bed2e9cc3a11e1

  • SHA1

    1c8252cdd0a204cbeb5534c0a3b6dd82716895af

  • SHA256

    163aed40fd6bd0f885f3d6201583bdc062044792d2b0ea8c0757ce00a6d4f0e2

  • SHA512

    7e2f769583eb45cf16ae41fa61280de2f798594f2710d524b8de047b7445f2c00a1d7bfd81b55e9d9e931cf984cfe8d6ad1d80bf73239ca08a92eba1d81f25ca

  • SSDEEP

    1536:jSqyQc5gsfh84Xpuu0rDhaltXkXo8UTaSzrbuip5hVNlwmWhyE1yoQgSE:MtRy4srDEioFaSiip5hVrwXTvS

Score
7/10
persistence

Malware Config

Targets

    • Target

      5e50674fc2ca3eff46bed2e9cc3a11e1_JaffaCakes118

    • Size

      134KB

    • MD5

      5e50674fc2ca3eff46bed2e9cc3a11e1

    • SHA1

      1c8252cdd0a204cbeb5534c0a3b6dd82716895af

    • SHA256

      163aed40fd6bd0f885f3d6201583bdc062044792d2b0ea8c0757ce00a6d4f0e2

    • SHA512

      7e2f769583eb45cf16ae41fa61280de2f798594f2710d524b8de047b7445f2c00a1d7bfd81b55e9d9e931cf984cfe8d6ad1d80bf73239ca08a92eba1d81f25ca

    • SSDEEP

      1536:jSqyQc5gsfh84Xpuu0rDhaltXkXo8UTaSzrbuip5hVNlwmWhyE1yoQgSE:MtRy4srDEioFaSiip5hVrwXTvS

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks