Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

889b3e2c01...18.exe

windows7-x64

3

889b3e2c01...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    889b3e2c0129ea293227f07e020cae11_JaffaCakes118

  • Size

    35KB

  • Sample

    240811-cp2zysvbld

  • MD5

    889b3e2c0129ea293227f07e020cae11

  • SHA1

    193964881a3b03c6acdabca40c497287aad8369d

  • SHA256

    1cb4da7455af5db229871851f7e200f850d0731919f24ba46d016d790134425e

  • SHA512

    b9189cd88b0cfaca0e0c8232f2cd98fcc8d5c966301841029c5b10f861c283dd55bb639f641ca96b674f04835e320361a829bd1d9cf5c026eceb0134f00140e7

  • SSDEEP

    768:6U5PPwVow7GMhFpksqexYeIKoDtBgceBDb6A7Kr:v5PPwF7GMhcsAJT2cg3ru

Score
8/10
defense_evasiondiscoverypersistenceprivilege_escalation

Malware Config

Targets

    • Target

      889b3e2c0129ea293227f07e020cae11_JaffaCakes118

    • Size

      35KB

    • MD5

      889b3e2c0129ea293227f07e020cae11

    • SHA1

      193964881a3b03c6acdabca40c497287aad8369d

    • SHA256

      1cb4da7455af5db229871851f7e200f850d0731919f24ba46d016d790134425e

    • SHA512

      b9189cd88b0cfaca0e0c8232f2cd98fcc8d5c966301841029c5b10f861c283dd55bb639f641ca96b674f04835e320361a829bd1d9cf5c026eceb0134f00140e7

    • SSDEEP

      768:6U5PPwVow7GMhFpksqexYeIKoDtBgceBDb6A7Kr:v5PPwF7GMhcsAJT2cg3ru

    Score
    8/10
    discoverydefense_evasionpersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks