Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

aa165c856b...18.exe

windows7-x64

10

aa165c856b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa165c856b3bc7c3e331117d655ccbee_JaffaCakes118

  • Size

    116KB

  • Sample

    240819-h4qs5athjq

  • MD5

    aa165c856b3bc7c3e331117d655ccbee

  • SHA1

    3e36e6220b9f2bed5912706ddf9424f87e0c321e

  • SHA256

    ce4fc27a6d12c2258d8255a103eb6c296430a62385ece1b1fee42ec1396be92e

  • SHA512

    29ab13206e79282b6babb4b5721bf78b3e81c29c19f5d8f72fbf83bc808b8751faa2b21d432386af0a4180ce72181294788463c0332b45bbdba748be8a58e0c9

  • SSDEEP

    1536:A+cIRG3cyfCapmE5zkons4MBikY+msHH0o4vwo3L2YRTB6m8AJ05:AF4M6dE5zkPBir+miUoUEYRTB6ZYQ

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      aa165c856b3bc7c3e331117d655ccbee_JaffaCakes118

    • Size

      116KB

    • MD5

      aa165c856b3bc7c3e331117d655ccbee

    • SHA1

      3e36e6220b9f2bed5912706ddf9424f87e0c321e

    • SHA256

      ce4fc27a6d12c2258d8255a103eb6c296430a62385ece1b1fee42ec1396be92e

    • SHA512

      29ab13206e79282b6babb4b5721bf78b3e81c29c19f5d8f72fbf83bc808b8751faa2b21d432386af0a4180ce72181294788463c0332b45bbdba748be8a58e0c9

    • SSDEEP

      1536:A+cIRG3cyfCapmE5zkons4MBikY+msHH0o4vwo3L2YRTB6m8AJ05:AF4M6dE5zkPBir+miUoUEYRTB6ZYQ

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks