Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

84748d5572...18.exe

windows7-x64

10

84748d5572...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    84748d5572e1cf9d1e6383b9ed7fa5b7_JaffaCakes118

  • Size

    136KB

  • Sample

    240810-csp5kavhpb

  • MD5

    84748d5572e1cf9d1e6383b9ed7fa5b7

  • SHA1

    fe252f9f74d4ea559c78747d0a5db9bc9153378d

  • SHA256

    2492fbb8bda7a74846fc06bd151e418af0c3e8fbbb79aa3ba0b141e6a2d7cc0c

  • SHA512

    ab3b760979a398923a56e706639bb06db67fbebbd986fd9d02395a72a389c33bb34b45cb2d5514920694ec465da0a95c1e596d18f3f9fb2b0abfbb5d8042ab1d

  • SSDEEP

    3072:BmcgHVwwjBfQn7WbIqH0ybZBiOllyEmcP82+aVdOt66VGegmH:Bmh1Qn7WbIqH0ybZBiOllyE5D+aVkjse

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      84748d5572e1cf9d1e6383b9ed7fa5b7_JaffaCakes118

    • Size

      136KB

    • MD5

      84748d5572e1cf9d1e6383b9ed7fa5b7

    • SHA1

      fe252f9f74d4ea559c78747d0a5db9bc9153378d

    • SHA256

      2492fbb8bda7a74846fc06bd151e418af0c3e8fbbb79aa3ba0b141e6a2d7cc0c

    • SHA512

      ab3b760979a398923a56e706639bb06db67fbebbd986fd9d02395a72a389c33bb34b45cb2d5514920694ec465da0a95c1e596d18f3f9fb2b0abfbb5d8042ab1d

    • SSDEEP

      3072:BmcgHVwwjBfQn7WbIqH0ybZBiOllyEmcP82+aVdOt66VGegmH:Bmh1Qn7WbIqH0ybZBiOllyE5D+aVkjse

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks