Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

61c0ef5bed...18.exe

windows7-x64

61c0ef5bed...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    61c0ef5bed97ef0cf5d6125abf30ec9b_JaffaCakes118

  • Size

    674KB

  • Sample

    240721-2yfkra1gmk

  • MD5

    61c0ef5bed97ef0cf5d6125abf30ec9b

  • SHA1

    2ce17d3a0f422702008c6578ff1026e9205da04f

  • SHA256

    8a2d6d76a4d005177164e1805627ae521500afcaeb052ba2889f3a2c0c8690b9

  • SHA512

    a0958d1f0c54d407ec710de5a6747aad6d5466449d971a89cd7d0ed83a3987643d27d9df2476174d2f3dd2171eacf9cea757492f724ab492a5d08fc5ed035e5a

  • SSDEEP

    12288:dkgVPXIx/ZpLD6EW5nfFko08b2S6D22z+H7fUA67uOSZsNW06:ugKFZpLDrgfF301DD2778AvOSZs96

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      61c0ef5bed97ef0cf5d6125abf30ec9b_JaffaCakes118

    • Size

      674KB

    • MD5

      61c0ef5bed97ef0cf5d6125abf30ec9b

    • SHA1

      2ce17d3a0f422702008c6578ff1026e9205da04f

    • SHA256

      8a2d6d76a4d005177164e1805627ae521500afcaeb052ba2889f3a2c0c8690b9

    • SHA512

      a0958d1f0c54d407ec710de5a6747aad6d5466449d971a89cd7d0ed83a3987643d27d9df2476174d2f3dd2171eacf9cea757492f724ab492a5d08fc5ed035e5a

    • SSDEEP

      12288:dkgVPXIx/ZpLD6EW5nfFko08b2S6D22z+H7fUA67uOSZsNW06:ugKFZpLDrgfF301DD2778AvOSZs96

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks