Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

a4d194a281...18.exe

windows7-x64

10

a4d194a281...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a4d194a281b7b1a5c3dd31b9df406b7d_JaffaCakes118

  • Size

    175KB

  • Sample

    240818-bk4gjszeqj

  • MD5

    a4d194a281b7b1a5c3dd31b9df406b7d

  • SHA1

    68a2728241d8b6295905ba650329ed632b2e151c

  • SHA256

    3cfd48abc285db2cd706d204c6c8990e3afb9ec9338537ebfb5c91e943cace71

  • SHA512

    cba7d37e71fcd79cf60817ba84ad176dd7f2979a938ec12fccb093a12cfe911f0921e236fd39addaa06ca5027916155625b3d2ee9c8671112447a52bcb260b79

  • SSDEEP

    3072:JXred4YI4gHwWehX2SoaOL71Jri0I2XsftcgNvzXy1H:JXre2YOHkt2gO/1JO04tfNbiJ

Score
10/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      a4d194a281b7b1a5c3dd31b9df406b7d_JaffaCakes118

    • Size

      175KB

    • MD5

      a4d194a281b7b1a5c3dd31b9df406b7d

    • SHA1

      68a2728241d8b6295905ba650329ed632b2e151c

    • SHA256

      3cfd48abc285db2cd706d204c6c8990e3afb9ec9338537ebfb5c91e943cace71

    • SHA512

      cba7d37e71fcd79cf60817ba84ad176dd7f2979a938ec12fccb093a12cfe911f0921e236fd39addaa06ca5027916155625b3d2ee9c8671112447a52bcb260b79

    • SSDEEP

      3072:JXred4YI4gHwWehX2SoaOL71Jri0I2XsftcgNvzXy1H:JXre2YOHkt2gO/1JO04tfNbiJ

    Score
    10/10
    discoverypersistencespywarestealerupx

    • Modifies WinLogon for persistence

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks