Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

74a2bbb303...18.exe

windows7-x64

10

74a2bbb303...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74a2bbb30346f4fea7f63144eb7539d3_JaffaCakes118

  • Size

    610KB

  • Sample

    240726-sxy62awemn

  • MD5

    74a2bbb30346f4fea7f63144eb7539d3

  • SHA1

    628f6a74e2c1d5445a11f566a538ff54bffd398e

  • SHA256

    3357a3ac0d396b2dba64da3c0ccdf7c9c9cb13eeb2d51329984f384037fc9d60

  • SHA512

    edbdf11f10affd8362945cff390dec3e7bb6a7b8c0449cdfb709b66e3465a0b5372dbfe1b2a998756ab7d119181cdee9553280a1eea1934a29f4da40dd229f05

  • SSDEEP

    6144:YsswXiWiXhez+GNe+/y2ZaGqB4WFlWY4m5QPDpUjVV:Cw0RnGT/y2ZaGqBfNIDpi

Score
10/10
discovery

Malware Config

Extracted

Credentials

  • Protocol:     ftp
  • Host:
    diavolzzz11.aiq.ru
  • Port:
    21
  • Username:
    u413747
  • Password:
    7k4rqphb

Targets

    • Target

      74a2bbb30346f4fea7f63144eb7539d3_JaffaCakes118

    • Size

      610KB

    • MD5

      74a2bbb30346f4fea7f63144eb7539d3

    • SHA1

      628f6a74e2c1d5445a11f566a538ff54bffd398e

    • SHA256

      3357a3ac0d396b2dba64da3c0ccdf7c9c9cb13eeb2d51329984f384037fc9d60

    • SHA512

      edbdf11f10affd8362945cff390dec3e7bb6a7b8c0449cdfb709b66e3465a0b5372dbfe1b2a998756ab7d119181cdee9553280a1eea1934a29f4da40dd229f05

    • SSDEEP

      6144:YsswXiWiXhez+GNe+/y2ZaGqB4WFlWY4m5QPDpUjVV:Cw0RnGT/y2ZaGqBfNIDpi

    Score
    10/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks