Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

82ed9a6800...18.exe

windows7-x64

10

82ed9a6800...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    82ed9a6800bd2f0d602f1cf22a220947_JaffaCakes118

  • Size

    232KB

  • Sample

    240802-ec3f3avbkm

  • MD5

    82ed9a6800bd2f0d602f1cf22a220947

  • SHA1

    f2fc34149b1002b422fd418a84b346e2fae705ed

  • SHA256

    9e06e8b23542507407417c295d092564a524c0c838469d91fa706224c4574e66

  • SHA512

    e1f299a474a87c171d2a7ac9ad50314e0fb5d4f6310a1c81464a4a1dfd3720370f2a64ec7961bee54e49aafc212181e561595a9837def8981f529d410512bd57

  • SSDEEP

    6144:DF3PFKs78g2KyEOaWEqxF6snji81RUinKdNOS:FPh+mF

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      82ed9a6800bd2f0d602f1cf22a220947_JaffaCakes118

    • Size

      232KB

    • MD5

      82ed9a6800bd2f0d602f1cf22a220947

    • SHA1

      f2fc34149b1002b422fd418a84b346e2fae705ed

    • SHA256

      9e06e8b23542507407417c295d092564a524c0c838469d91fa706224c4574e66

    • SHA512

      e1f299a474a87c171d2a7ac9ad50314e0fb5d4f6310a1c81464a4a1dfd3720370f2a64ec7961bee54e49aafc212181e561595a9837def8981f529d410512bd57

    • SSDEEP

      6144:DF3PFKs78g2KyEOaWEqxF6snji81RUinKdNOS:FPh+mF

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks