Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

86a5ddc104...18.exe

windows7-x64

8

86a5ddc104...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    86a5ddc1049a8d33593755bf34c7c21d_JaffaCakes118

  • Size

    40KB

  • Sample

    240810-s32jcazekh

  • MD5

    86a5ddc1049a8d33593755bf34c7c21d

  • SHA1

    11d5cb9213c9c6776bffe5e6b1072ec95482157d

  • SHA256

    69b1c30e963cf9e05cb39a351b988ac1a8f88b0e3bbc0d6e0d3d71b73fe6a144

  • SHA512

    5b9a988c6c0fadd244bc4dec79668b3b319052647fec837eb067065fd261a9db4d2d6124fe7afe0091aeded7ebe3a7aca39bb4dad95a95e71f117182b6ebe8c4

  • SSDEEP

    768:1m/QojCpHfx05k6SLZRI+WE6F2UzpHjhm8f10+a6:EQojc5LLI+W5ljf

Score
8/10
discovery

Malware Config

Targets

    • Target

      86a5ddc1049a8d33593755bf34c7c21d_JaffaCakes118

    • Size

      40KB

    • MD5

      86a5ddc1049a8d33593755bf34c7c21d

    • SHA1

      11d5cb9213c9c6776bffe5e6b1072ec95482157d

    • SHA256

      69b1c30e963cf9e05cb39a351b988ac1a8f88b0e3bbc0d6e0d3d71b73fe6a144

    • SHA512

      5b9a988c6c0fadd244bc4dec79668b3b319052647fec837eb067065fd261a9db4d2d6124fe7afe0091aeded7ebe3a7aca39bb4dad95a95e71f117182b6ebe8c4

    • SSDEEP

      768:1m/QojCpHfx05k6SLZRI+WE6F2UzpHjhm8f10+a6:EQojc5LLI+W5ljf

    Score
    8/10
    discovery

    • Drops file in Drivers directory

    • Manipulates Digital Signatures

      Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks