Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

68d8877751...18.exe

windows7-x64

8

68d8877751...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    68d8877751499e56bb32f0adc3be8ef7_JaffaCakes118

  • Size

    41KB

  • Sample

    240723-zfh7taxdlq

  • MD5

    68d8877751499e56bb32f0adc3be8ef7

  • SHA1

    41f6a1ae676dc1533691a9b0ccb54e63232bfdd4

  • SHA256

    efd6afacdcb5ab5324b292f57030150a730b0faa778b693d5a8d51e5be266235

  • SHA512

    133cad7fa6f89cff591449b85fb739ff3e494a7f86f5f3b4d428923bd26c7fbf00870ccc45c6d9e14e5097150423d77d763c7d670cc005e83f27f64f26f4a84a

  • SSDEEP

    768:Y5qiEdRL4oVmB5QSdIcGnf7ngRJqFbyVfm4LF1Y232WDQsz/b7XTY:YCrLBbbgSbyA4y2m9w/b7M

Score
8/10
defense_evasiondiscovery

Malware Config

Targets

    • Target

      68d8877751499e56bb32f0adc3be8ef7_JaffaCakes118

    • Size

      41KB

    • MD5

      68d8877751499e56bb32f0adc3be8ef7

    • SHA1

      41f6a1ae676dc1533691a9b0ccb54e63232bfdd4

    • SHA256

      efd6afacdcb5ab5324b292f57030150a730b0faa778b693d5a8d51e5be266235

    • SHA512

      133cad7fa6f89cff591449b85fb739ff3e494a7f86f5f3b4d428923bd26c7fbf00870ccc45c6d9e14e5097150423d77d763c7d670cc005e83f27f64f26f4a84a

    • SSDEEP

      768:Y5qiEdRL4oVmB5QSdIcGnf7ngRJqFbyVfm4LF1Y232WDQsz/b7XTY:YCrLBbbgSbyA4y2m9w/b7M

    Score
    8/10
    defense_evasiondiscovery

    • Drops file in Drivers directory

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks