Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

822af9ab2a...18.exe

windows7-x64

7

822af9ab2a...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    822af9ab2a2a673d85cef074387ac260_JaffaCakes118

  • Size

    176KB

  • Sample

    240801-3jlnwssejm

  • MD5

    822af9ab2a2a673d85cef074387ac260

  • SHA1

    27efb2854d89b971723bb747260a8aa8057d9e1d

  • SHA256

    740dc63b7968b4a95d228d249ee861464958a1da3b263612a73c36e704b0b4ca

  • SHA512

    7f4f7337a2cb41a5ab832c128ac327833124e68346e161063c4653fd35bf292a8c1d762ef40278c784e2219fd73c675b23d6484a20674d2cdb60c56183bd4482

  • SSDEEP

    3072:VUa4ujEO3O5dKr+mTN5wUyFVoEnsTtTkcagnaLnyE/ubLcPx2RyAPoDvhP4oB+Rk:Au85Qrr4UA5cnswbgPxgyAPEvhPiRmwc

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      822af9ab2a2a673d85cef074387ac260_JaffaCakes118

    • Size

      176KB

    • MD5

      822af9ab2a2a673d85cef074387ac260

    • SHA1

      27efb2854d89b971723bb747260a8aa8057d9e1d

    • SHA256

      740dc63b7968b4a95d228d249ee861464958a1da3b263612a73c36e704b0b4ca

    • SHA512

      7f4f7337a2cb41a5ab832c128ac327833124e68346e161063c4653fd35bf292a8c1d762ef40278c784e2219fd73c675b23d6484a20674d2cdb60c56183bd4482

    • SSDEEP

      3072:VUa4ujEO3O5dKr+mTN5wUyFVoEnsTtTkcagnaLnyE/ubLcPx2RyAPoDvhP4oB+Rk:Au85Qrr4UA5cnswbgPxgyAPEvhPiRmwc

    Score
    7/10
    discoverypersistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks