Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

a648da1b92...18.exe

windows7-x64

10

a648da1b92...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a648da1b92d2e19564da7141abd6a568_JaffaCakes118

  • Size

    138KB

  • Sample

    240818-ln7y9axfkg

  • MD5

    a648da1b92d2e19564da7141abd6a568

  • SHA1

    76c8d878b4e6b5fadaea382a2eb910c1608fd1de

  • SHA256

    c7d5ccb45fb3d0fa4b91ae0123c3443975769176aa15ccc24def13d6dd8e812d

  • SHA512

    eb0ae9f673356ddf4dd692cfe9ff037a4614d83f5d132f766fd4a0750b548d7b3ba92cf38a1c73f4d150f2387cf20d5dc5e063ae6d1cbab553eb0e96174e61db

  • SSDEEP

    1536:icZdCROWxp1sYEPKJ8q5LLF6n1DDE+IwL2cPj7qEYa9YzeGwf1dP0unZnouy8:iwCcWxp1R5hLsDE+52UqER+gTdJout

Score
10/10
discoveryevasionexecutionpersistenceupx

Malware Config

Targets

    • Target

      a648da1b92d2e19564da7141abd6a568_JaffaCakes118

    • Size

      138KB

    • MD5

      a648da1b92d2e19564da7141abd6a568

    • SHA1

      76c8d878b4e6b5fadaea382a2eb910c1608fd1de

    • SHA256

      c7d5ccb45fb3d0fa4b91ae0123c3443975769176aa15ccc24def13d6dd8e812d

    • SHA512

      eb0ae9f673356ddf4dd692cfe9ff037a4614d83f5d132f766fd4a0750b548d7b3ba92cf38a1c73f4d150f2387cf20d5dc5e063ae6d1cbab553eb0e96174e61db

    • SSDEEP

      1536:icZdCROWxp1sYEPKJ8q5LLF6n1DDE+IwL2cPj7qEYa9YzeGwf1dP0unZnouy8:iwCcWxp1R5hLsDE+52UqER+gTdJout

    Score
    10/10
    discoveryevasionexecutionpersistenceupx

    • Disables service(s)

      evasionexecution

    • Adds policy Run key to start application

      persistence

    • Drops file in Drivers directory

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks