Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

62e87455e2...18.dll

windows7-x64

10

62e87455e2...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    62e87455e2d4d8bdcdff3995d3c3abfa_JaffaCakes118

  • Size

    337KB

  • Sample

    240722-mqyzsstfkl

  • MD5

    62e87455e2d4d8bdcdff3995d3c3abfa

  • SHA1

    2ed665915f11fbf82e3302c11babba8a4f4253eb

  • SHA256

    2c0461dc149016883bdfaecd7dec92a5037f7773d26eff8ca4dd11c5e84071d4

  • SHA512

    52c057f2429c303ababae8ed3166258758c8e47ba0da68f1ce66f40e6afbcd74f9ecdc9e6c04c27b24dccf2b6104958a44183382283c5f0eec1d0ef9229f95ee

  • SSDEEP

    6144:UN0yr1sO/wIKS0FKtOT/OrDtgUi0uvQee7Qee/0QeesQeeglQeekQeeDC7MRjde4:0G6wndYtamDSU1CjdedpAt

Score
10/10
ramnitbankerpersistencespywarestealertrojanupxworm

Malware Config

Targets

    • Target

      62e87455e2d4d8bdcdff3995d3c3abfa_JaffaCakes118

    • Size

      337KB

    • MD5

      62e87455e2d4d8bdcdff3995d3c3abfa

    • SHA1

      2ed665915f11fbf82e3302c11babba8a4f4253eb

    • SHA256

      2c0461dc149016883bdfaecd7dec92a5037f7773d26eff8ca4dd11c5e84071d4

    • SHA512

      52c057f2429c303ababae8ed3166258758c8e47ba0da68f1ce66f40e6afbcd74f9ecdc9e6c04c27b24dccf2b6104958a44183382283c5f0eec1d0ef9229f95ee

    • SSDEEP

      6144:UN0yr1sO/wIKS0FKtOT/OrDtgUi0uvQee7Qee/0QeesQeeglQeekQeeDC7MRjde4:0G6wndYtamDSU1CjdedpAt

    Score
    10/10
    ramnitbankerpersistencespywarestealertrojanupxworm

    • Modifies WinLogon for persistence

      persistence

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks