Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

884eb82eda...18.exe

windows7-x64

10

884eb82eda...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    884eb82eda7b82bc74baeabd392ba7bb_JaffaCakes118

  • Size

    123KB

  • Sample

    240811-aw4q1swenm

  • MD5

    884eb82eda7b82bc74baeabd392ba7bb

  • SHA1

    b8eebe594495a27857b1ac955e7a96eed5faadbb

  • SHA256

    3e2f610e362c303ebac67059af06ffe2bc103960fb1afbf975d4fdd3f5d8bcb0

  • SHA512

    313fd01fb746826bdb1339b364ed98684a3278d4ce45089093787836f6cdc67fd66eb9561f71640a5663e70df34f6cdc9529daa22ca586acd6cd521b5a88e724

  • SSDEEP

    1536:1R0vxn3Pc0LCH9MtbvabUDzJYWu3BmiIuw22Jn1fbO4V:1R2xn3k0CdM1vabyzJYWqQa2

Score
10/10
ramnitbankerdiscoverypersistencespywarestealertrojanupxworm

Malware Config

Targets

    • Target

      884eb82eda7b82bc74baeabd392ba7bb_JaffaCakes118

    • Size

      123KB

    • MD5

      884eb82eda7b82bc74baeabd392ba7bb

    • SHA1

      b8eebe594495a27857b1ac955e7a96eed5faadbb

    • SHA256

      3e2f610e362c303ebac67059af06ffe2bc103960fb1afbf975d4fdd3f5d8bcb0

    • SHA512

      313fd01fb746826bdb1339b364ed98684a3278d4ce45089093787836f6cdc67fd66eb9561f71640a5663e70df34f6cdc9529daa22ca586acd6cd521b5a88e724

    • SSDEEP

      1536:1R0vxn3Pc0LCH9MtbvabUDzJYWu3BmiIuw22Jn1fbO4V:1R2xn3k0CdM1vabyzJYWqQa2

    Score
    10/10
    ramnitbankerdiscoverypersistencespywarestealertrojanupxworm

    • Modifies WinLogon for persistence

      persistence

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks