Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

7578908343...18.exe

windows7-x64

8

7578908343...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    757890834362fdd5a0335667192b9266_JaffaCakes118

  • Size

    3.4MB

  • Sample

    240726-yjmhzatfrc

  • MD5

    757890834362fdd5a0335667192b9266

  • SHA1

    17c4b9bed61dc54fd04509a3d3bc36e6ee27ba4b

  • SHA256

    229558dc23ef25b30520260dc82ff282bf8f51c9423f0a2a7079fe955643ce69

  • SHA512

    e443a20bf95379480951661f65b19bb655b5a191f138ce854cc9f40592834dfafe086aba5ee7a5b4741b6318f30099c1134c307ef0fbadc42d11b16b85a8f4ee

  • SSDEEP

    49152:lIr7GGaITDEZxISJJCLZGhUcwM7FVSR0S67b8pbhpkjJY7X1XuYfrKrboYgOs:LZxT6cwU/zSbbhAJYr1XuYfrCYOs

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      757890834362fdd5a0335667192b9266_JaffaCakes118

    • Size

      3.4MB

    • MD5

      757890834362fdd5a0335667192b9266

    • SHA1

      17c4b9bed61dc54fd04509a3d3bc36e6ee27ba4b

    • SHA256

      229558dc23ef25b30520260dc82ff282bf8f51c9423f0a2a7079fe955643ce69

    • SHA512

      e443a20bf95379480951661f65b19bb655b5a191f138ce854cc9f40592834dfafe086aba5ee7a5b4741b6318f30099c1134c307ef0fbadc42d11b16b85a8f4ee

    • SSDEEP

      49152:lIr7GGaITDEZxISJJCLZGhUcwM7FVSR0S67b8pbhpkjJY7X1XuYfrKrboYgOs:LZxT6cwU/zSbbhAJYr1XuYfrCYOs

    Score
    8/10
    discoverypersistence

    • Server Software Component: Terminal Services DLL

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks