Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

8e8f9540b9...18.dll

windows7-x64

8

8e8f9540b9...18.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e8f9540b9234ebac4a3e41cf5d8fae9_JaffaCakes118

  • Size

    32KB

  • Sample

    240812-njxntstamc

  • MD5

    8e8f9540b9234ebac4a3e41cf5d8fae9

  • SHA1

    8b397bcf45c4668dd1070afbfe2a2cded066cac6

  • SHA256

    50067e896a694f4c83e7a4f324cf19d05c1c70db8d1d4fe979af702964d5f5d7

  • SHA512

    02e26c09f330a8d5b118f7a63f1bb20db5fddc7c6617575c71f32a3b1b9c473a355ce8c0669474b090e674fc3d644ebb425b1b8cdd350ad6a5f51ad28a4cba18

  • SSDEEP

    384:ZaXSbS8RQP1RxVkosHVmWebRJZZPzAT0DyE7Q1Ww7//ChLu3/Y:ZaXMssKbRJZ9zs0yQQ1W8/6hLu3/

Score
8/10
discoverypersistenceprivilege_escalation

Malware Config

Targets

    • Target

      8e8f9540b9234ebac4a3e41cf5d8fae9_JaffaCakes118

    • Size

      32KB

    • MD5

      8e8f9540b9234ebac4a3e41cf5d8fae9

    • SHA1

      8b397bcf45c4668dd1070afbfe2a2cded066cac6

    • SHA256

      50067e896a694f4c83e7a4f324cf19d05c1c70db8d1d4fe979af702964d5f5d7

    • SHA512

      02e26c09f330a8d5b118f7a63f1bb20db5fddc7c6617575c71f32a3b1b9c473a355ce8c0669474b090e674fc3d644ebb425b1b8cdd350ad6a5f51ad28a4cba18

    • SSDEEP

      384:ZaXSbS8RQP1RxVkosHVmWebRJZZPzAT0DyE7Q1Ww7//ChLu3/Y:ZaXMssKbRJZ9zs0yQQ1W8/6hLu3/

    Score
    8/10
    discoverypersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks