Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

a584d7f2f1...18.exe

windows7-x64

7

a584d7f2f1...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a584d7f2f1852463e449b5450f782080_JaffaCakes118

  • Size

    68KB

  • Sample

    240818-fwnyfszfkk

  • MD5

    a584d7f2f1852463e449b5450f782080

  • SHA1

    94377a33b65218b5df9075ef892fae026aca3f9c

  • SHA256

    898e8d6a8d0dafe81052066c542892106d20148eabfaa9c84f0f80bcd3552ad6

  • SHA512

    8ab75570355d9c5188a27c151e38e8b035e8a40a753f2c15587b19008e71eb108a769cebd019a5a1b8b1b87bcbaf8036347f127fe745c46a517662767f652b67

  • SSDEEP

    768:q+drPtHk711IYpq23ZdFbNVFQL5lCCENafjORvKN97WK9OENRDamusc:qIW71ZqA3V6CafcvS7JJNRvusc

Score
7/10
adwarediscoverypersistencestealer

Malware Config

Targets

    • Target

      a584d7f2f1852463e449b5450f782080_JaffaCakes118

    • Size

      68KB

    • MD5

      a584d7f2f1852463e449b5450f782080

    • SHA1

      94377a33b65218b5df9075ef892fae026aca3f9c

    • SHA256

      898e8d6a8d0dafe81052066c542892106d20148eabfaa9c84f0f80bcd3552ad6

    • SHA512

      8ab75570355d9c5188a27c151e38e8b035e8a40a753f2c15587b19008e71eb108a769cebd019a5a1b8b1b87bcbaf8036347f127fe745c46a517662767f652b67

    • SSDEEP

      768:q+drPtHk711IYpq23ZdFbNVFQL5lCCENafjORvKN97WK9OENRDamusc:qIW71ZqA3V6CafcvS7JJNRvusc

    Score
    7/10
    adwarediscoverypersistencestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks