Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

747f243756...18.exe

windows7-x64

8

747f243756...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    747f243756ee899e58e364417be1ab72_JaffaCakes118

  • Size

    1.5MB

  • Sample

    240726-r6jbhathmr

  • MD5

    747f243756ee899e58e364417be1ab72

  • SHA1

    2a557454fe70626165257832b99e4d99e5a46bb1

  • SHA256

    e53f3d3ad4f40b11f4ee2a1cedf612589470c672bf0a1a1cf1f95182efc4b08a

  • SHA512

    043aa9119014fdc8b2c742664765b7bd6e85d08042a90a57f8914bcb45ab339a9a3583c9a57532f5c18e230f3de5f24adf839b33ae44287d4c3f0aa117c6a7f9

  • SSDEEP

    24576:7NXpop9ARM6UWEcyQhikMur02hjCODXOkVdu606ls/B5ouqpgNiL1QqTG9lTWgk5:RXUAStcypkbldu6WpKW7qa9wgi

Score
8/10
defense_evasiondiscoverypersistence

Malware Config

Targets

    • Target

      747f243756ee899e58e364417be1ab72_JaffaCakes118

    • Size

      1.5MB

    • MD5

      747f243756ee899e58e364417be1ab72

    • SHA1

      2a557454fe70626165257832b99e4d99e5a46bb1

    • SHA256

      e53f3d3ad4f40b11f4ee2a1cedf612589470c672bf0a1a1cf1f95182efc4b08a

    • SHA512

      043aa9119014fdc8b2c742664765b7bd6e85d08042a90a57f8914bcb45ab339a9a3583c9a57532f5c18e230f3de5f24adf839b33ae44287d4c3f0aa117c6a7f9

    • SSDEEP

      24576:7NXpop9ARM6UWEcyQhikMur02hjCODXOkVdu606ls/B5ouqpgNiL1QqTG9lTWgk5:RXUAStcypkbldu6WpKW7qa9wgi

    Score
    8/10
    defense_evasiondiscoverypersistence

    • Server Software Component: Terminal Services DLL

      persistence

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Deletes itself

    • Loads dropped DLL

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks