Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

611efffea1...18.exe

windows7-x64

7

611efffea1...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    611efffea1d58b68a3967e98b8c70e83_JaffaCakes118

  • Size

    491KB

  • Sample

    240721-ybtmba1dqe

  • MD5

    611efffea1d58b68a3967e98b8c70e83

  • SHA1

    fc337463b6b2da9b61b1dc3a068de038cd6b37e9

  • SHA256

    1a13d16848e43115530eb8ab59d019ad1f640ed4a84f665296e2611bfe3eb1c8

  • SHA512

    bd7bdd62b075000014be03ead5733f9655afc4799021d294b2743344d49133f24be909f94fca2885ee33b0e158c56487305f34f378bbd09e0c1cfb88f0837be0

  • SSDEEP

    12288:TBqMD6NTVD/7Ftyq1zH6NZU1D8fBbQji4+8E:1qMD6NNzdzH68ufty+8E

Score
7/10
evasionpersistence

Malware Config

Targets

    • Target

      611efffea1d58b68a3967e98b8c70e83_JaffaCakes118

    • Size

      491KB

    • MD5

      611efffea1d58b68a3967e98b8c70e83

    • SHA1

      fc337463b6b2da9b61b1dc3a068de038cd6b37e9

    • SHA256

      1a13d16848e43115530eb8ab59d019ad1f640ed4a84f665296e2611bfe3eb1c8

    • SHA512

      bd7bdd62b075000014be03ead5733f9655afc4799021d294b2743344d49133f24be909f94fca2885ee33b0e158c56487305f34f378bbd09e0c1cfb88f0837be0

    • SSDEEP

      12288:TBqMD6NTVD/7Ftyq1zH6NZU1D8fBbQji4+8E:1qMD6NNzdzH68ufty+8E

    Score
    7/10
    evasionpersistence

    • Executes dropped EXE

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks