Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

a627237a73...18.exe

windows7-x64

7

a627237a73...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a627237a73eb63743343a49ea95f5f2c_JaffaCakes118

  • Size

    309KB

  • Sample

    240818-kv7fmawbqf

  • MD5

    a627237a73eb63743343a49ea95f5f2c

  • SHA1

    99c6c43908418ac9b7165d82d088be590a1fdc89

  • SHA256

    bc8c6da95a3d1c1b04267fac9f37f01c1c27ebc8dcb48faa4646df223660364c

  • SHA512

    33eb39b36c619585dc77639acedb5ee067c0f9ad4b040f9e9927299c94cf94494d118f079310b5b9d634f145047fac668cb326dcda679ec9e788c495ba59b832

  • SSDEEP

    6144:8ipx7Bq5oeVH8dJs07odRmY8B39m/6MMMm/v9ZNJKE7k1Jtj0Ssha9xP50C4:nqh66Tmvtm/IH9JJk17Lsh8dv4

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      a627237a73eb63743343a49ea95f5f2c_JaffaCakes118

    • Size

      309KB

    • MD5

      a627237a73eb63743343a49ea95f5f2c

    • SHA1

      99c6c43908418ac9b7165d82d088be590a1fdc89

    • SHA256

      bc8c6da95a3d1c1b04267fac9f37f01c1c27ebc8dcb48faa4646df223660364c

    • SHA512

      33eb39b36c619585dc77639acedb5ee067c0f9ad4b040f9e9927299c94cf94494d118f079310b5b9d634f145047fac668cb326dcda679ec9e788c495ba59b832

    • SSDEEP

      6144:8ipx7Bq5oeVH8dJs07odRmY8B39m/6MMMm/v9ZNJKE7k1Jtj0Ssha9xP50C4:nqh66Tmvtm/IH9JJk17Lsh8dv4

    Score
    7/10
    discoverypersistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks