Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

642ef37f74...18.exe

windows7-x64

7

642ef37f74...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    642ef37f7493e5695f20d8cf2574f705_JaffaCakes118

  • Size

    290KB

  • Sample

    240722-wf4lzazfjm

  • MD5

    642ef37f7493e5695f20d8cf2574f705

  • SHA1

    08fbd79b90d76126b535b36e7fefb4716c95c310

  • SHA256

    ddc9637f1f74a8c1224e3ca2dd854e18154d3c74693fdaab9872a9bef3e60cdb

  • SHA512

    505e8eb33230efcbfa3856d2429b9d589d9de3394ff7b42da03b9a110a6c5e13712ccd753de05ec2aac5c3bef0a983b6b8e9ba5a2d804824a75c202f33ae94ba

  • SSDEEP

    6144:KfsVV09Du+Rc9DMQtc9LMojzmx1i68Nb/67pkkDvarYdYLx3IhpD:Os2C9DGh1wi6A/ephDvRY13QpD

Score
7/10
persistence

Malware Config

Targets

    • Target

      642ef37f7493e5695f20d8cf2574f705_JaffaCakes118

    • Size

      290KB

    • MD5

      642ef37f7493e5695f20d8cf2574f705

    • SHA1

      08fbd79b90d76126b535b36e7fefb4716c95c310

    • SHA256

      ddc9637f1f74a8c1224e3ca2dd854e18154d3c74693fdaab9872a9bef3e60cdb

    • SHA512

      505e8eb33230efcbfa3856d2429b9d589d9de3394ff7b42da03b9a110a6c5e13712ccd753de05ec2aac5c3bef0a983b6b8e9ba5a2d804824a75c202f33ae94ba

    • SSDEEP

      6144:KfsVV09Du+Rc9DMQtc9LMojzmx1i68Nb/67pkkDvarYdYLx3IhpD:Os2C9DGh1wi6A/ephDvRY13QpD

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks