Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

EJ.Technol...L].exe

windows7-x64

10

EJ.Technol...L].exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5f9078cb5c0331d46f8266ef64393059_JaffaCakes118

  • Size

    462KB

  • Sample

    240720-h9zcfsscqj

  • MD5

    5f9078cb5c0331d46f8266ef64393059

  • SHA1

    82524a7db4f34eed87e622ba6555b2c783c35033

  • SHA256

    25f0131c83491a7fd63ee9e558a268c7213df3653191885ba3fb56040682acbf

  • SHA512

    5063aed6b010657b6df98bb25cd1576d846f060350cd649dc1235fcbdc8dcdafbac85c4fc4baab18e5008bd9b821a769c2054ef9d4b167679fa1d793baf9a7b0

  • SSDEEP

    12288:YKoS493ACIl7vI1kiqHNnyVek/a4QmHNX467pBAPsYMMmYY:boIjIbgyLC495467PAPUMbY

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      EJ.Technologies.Exe4j.v4.1.0.Incl.Keygen-FALLEN [CRACKED + SERIAL].exe

    • Size

      462KB

    • MD5

      45ef7f0a7cddaeb12f389dd42c32ba3f

    • SHA1

      c190c3e00dcd6ef1ca8bbcf5998607f41ba66bd2

    • SHA256

      b9b4a555e76a03aa55733080a975b6ba52df59fc8b540d699a8f52ddcfe4d0e9

    • SHA512

      252cc14257a1c9939e1747ea03e88e5bb8c66cb4fb91809790692a82d8ca476a4403f0172fef774efd6c378c34974c0b73fbf5c07b2cfd143e466fb54cc99f95

    • SSDEEP

      12288:RKoS493ACIl7vI1kiqHNnyVek/a4QmHNX467pBAPsYMMmY:ooIjIbgyLC495467PAPUMb

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks