Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

71ec30ec06...18.exe

windows7-x64

8

71ec30ec06...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    71ec30ec06a6fd95630e56349f6d8b47_JaffaCakes118

  • Size

    414KB

  • Sample

    240726-a1vznsvfpl

  • MD5

    71ec30ec06a6fd95630e56349f6d8b47

  • SHA1

    943a1ff4c53e93dd0f25cf894d356cb10465319e

  • SHA256

    62750e034c8c36eb1348d4999a921feb0950bbae4622b8f0b8fac584814d3283

  • SHA512

    8ad9e7e30551d20ccbe35021f1418bfb83541419ea8146c216f64c9dbc0be37844285d013efddb0d81c3589fa4e5de0e8984e93d9136de39d6227549f35ad2bb

  • SSDEEP

    12288:Wa9Z0LGXSQNmMt9MVHWvcWjcfF+qrX6Mzll6FrwMaewjt:Wi2CCQAu9EWjc9pbll3MNwjt

Score
8/10
discoveryevasionpersistenceupx

Malware Config

Targets

    • Target

      71ec30ec06a6fd95630e56349f6d8b47_JaffaCakes118

    • Size

      414KB

    • MD5

      71ec30ec06a6fd95630e56349f6d8b47

    • SHA1

      943a1ff4c53e93dd0f25cf894d356cb10465319e

    • SHA256

      62750e034c8c36eb1348d4999a921feb0950bbae4622b8f0b8fac584814d3283

    • SHA512

      8ad9e7e30551d20ccbe35021f1418bfb83541419ea8146c216f64c9dbc0be37844285d013efddb0d81c3589fa4e5de0e8984e93d9136de39d6227549f35ad2bb

    • SSDEEP

      12288:Wa9Z0LGXSQNmMt9MVHWvcWjcfF+qrX6Mzll6FrwMaewjt:Wi2CCQAu9EWjc9pbll3MNwjt

    Score
    8/10
    discoveryevasionpersistenceupx

    • Disables Task Manager via registry modification

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks