Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

673ed9a584...18.exe

windows7-x64

7

673ed9a584...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    673ed9a584f0346d312b805c3dbef430_JaffaCakes118

  • Size

    357KB

  • Sample

    240723-mqjvwascrn

  • MD5

    673ed9a584f0346d312b805c3dbef430

  • SHA1

    2ade715a014c32fd1ce20947e873d779d501c83f

  • SHA256

    5a002015f4d1ef823aaea9fd703ef1b139249f5c8e9805cc5c67dc6c535eca3e

  • SHA512

    e2c6db620bf859db1dbc0c32d47d5ccf9774e012ce645a62fa2dbfb210adf3bc25faef64606cf39c90c15f158888c01d037176da98f4f9329cae235a1bc18a97

  • SSDEEP

    6144:C4//2pBmAHs3czyOxW8RjSqjAvzxCaQHkRxX0ZjOEd4xEtpzbpw:C4GpBfHs3czfxW8B7jAv1CaXrIGGbS

Score
7/10
persistence

Malware Config

Targets

    • Target

      673ed9a584f0346d312b805c3dbef430_JaffaCakes118

    • Size

      357KB

    • MD5

      673ed9a584f0346d312b805c3dbef430

    • SHA1

      2ade715a014c32fd1ce20947e873d779d501c83f

    • SHA256

      5a002015f4d1ef823aaea9fd703ef1b139249f5c8e9805cc5c67dc6c535eca3e

    • SHA512

      e2c6db620bf859db1dbc0c32d47d5ccf9774e012ce645a62fa2dbfb210adf3bc25faef64606cf39c90c15f158888c01d037176da98f4f9329cae235a1bc18a97

    • SSDEEP

      6144:C4//2pBmAHs3czyOxW8RjSqjAvzxCaQHkRxX0ZjOEd4xEtpzbpw:C4GpBfHs3czfxW8B7jAv1CaXrIGGbS

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks