Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

acd3041a9e...18.exe

windows7-x64

10

acd3041a9e...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    acd3041a9e3aa9db3900c950629aadd3_JaffaCakes118

  • Size

    452KB

  • Sample

    240819-2byg2ssgql

  • MD5

    acd3041a9e3aa9db3900c950629aadd3

  • SHA1

    3a6aa96e2788b0586a0ce1f5b75575acdfda5010

  • SHA256

    fd4793d6f715ae7abde92c36a7c2821f4b52bbd03e1cded67ce7d01c5fcf8563

  • SHA512

    1b8ce541dff670795b1b465ba9e88423062062d80786909696f69467bffcab61992edea6f228996fb8a3c5a1bb242b004b8a65cbf5c9720aa9c58e2f4e11ee5a

  • SSDEEP

    6144:EMJAC6XorfrECqT47sV3cnH/crMPyDNfPecX7+zZJd57ZuWpFCB:E0corfrNqTJcHErMaDNfPe+78ZJxg

Score
10/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      acd3041a9e3aa9db3900c950629aadd3_JaffaCakes118

    • Size

      452KB

    • MD5

      acd3041a9e3aa9db3900c950629aadd3

    • SHA1

      3a6aa96e2788b0586a0ce1f5b75575acdfda5010

    • SHA256

      fd4793d6f715ae7abde92c36a7c2821f4b52bbd03e1cded67ce7d01c5fcf8563

    • SHA512

      1b8ce541dff670795b1b465ba9e88423062062d80786909696f69467bffcab61992edea6f228996fb8a3c5a1bb242b004b8a65cbf5c9720aa9c58e2f4e11ee5a

    • SSDEEP

      6144:EMJAC6XorfrECqT47sV3cnH/crMPyDNfPecX7+zZJd57ZuWpFCB:E0corfrNqTJcHErMaDNfPe+78ZJxg

    Score
    10/10
    discoveryevasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks