Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

8445c299d6...18.exe

windows7-x64

10

8445c299d6...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8445c299d6cf6860166bff858dc1f439_JaffaCakes118

  • Size

    248KB

  • Sample

    240810-bmfs9ssgkb

  • MD5

    8445c299d6cf6860166bff858dc1f439

  • SHA1

    a30cb955ebe7658d321480e120bf2e5b4229134b

  • SHA256

    6a37f0fdd394480c80644aacfdf61cf2a1fdecbf478a9e1de59398ae46ab0e37

  • SHA512

    4d463bcb73c0da730a1f3c57be20ce61b9339c7e4d98aeb48f75962f4f8cac23a58a3c270602aef993cde25f4586442eba1685260428ac7d5435f8d1ade4e354

  • SSDEEP

    6144:NtM5CElofkFWQPtnRneqAKnvmb7/D269fgwMty0e6ndv0D:Ni5CLkFfnRnWKnvmb7/D26qndv0D

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      8445c299d6cf6860166bff858dc1f439_JaffaCakes118

    • Size

      248KB

    • MD5

      8445c299d6cf6860166bff858dc1f439

    • SHA1

      a30cb955ebe7658d321480e120bf2e5b4229134b

    • SHA256

      6a37f0fdd394480c80644aacfdf61cf2a1fdecbf478a9e1de59398ae46ab0e37

    • SHA512

      4d463bcb73c0da730a1f3c57be20ce61b9339c7e4d98aeb48f75962f4f8cac23a58a3c270602aef993cde25f4586442eba1685260428ac7d5435f8d1ade4e354

    • SSDEEP

      6144:NtM5CElofkFWQPtnRneqAKnvmb7/D269fgwMty0e6ndv0D:Ni5CLkFfnRnWKnvmb7/D26qndv0D

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks