Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

aa52b801e8...18.exe

windows7-x64

10

aa52b801e8...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa52b801e88c1fe16c37cdc4c18b306e_JaffaCakes118

  • Size

    290KB

  • Sample

    240819-kk236axepl

  • MD5

    aa52b801e88c1fe16c37cdc4c18b306e

  • SHA1

    e62d7a0325d9fd4e1214d748ff064c63b81cf30f

  • SHA256

    44ac3db63c108403905eee2cc89526e3d68096cc59a7fdfe7e84ba288007fe12

  • SHA512

    866c9315eaff5b106e4bd4f9ca6fb9a27bedaa67676f0181ca639a6eb4d3296669fbff6d6af26a1b192bf710765bb3e02858261b43b1d60a50b91d81fdf06bec

  • SSDEEP

    6144:pnce1lxZ2ZIW/9PX5tkLD2QLR+YIVsC9wt4ZIW/9PX5tkLD2QW:pnJ1aI89x6LD26Y9wMI89x6LD21

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      aa52b801e88c1fe16c37cdc4c18b306e_JaffaCakes118

    • Size

      290KB

    • MD5

      aa52b801e88c1fe16c37cdc4c18b306e

    • SHA1

      e62d7a0325d9fd4e1214d748ff064c63b81cf30f

    • SHA256

      44ac3db63c108403905eee2cc89526e3d68096cc59a7fdfe7e84ba288007fe12

    • SHA512

      866c9315eaff5b106e4bd4f9ca6fb9a27bedaa67676f0181ca639a6eb4d3296669fbff6d6af26a1b192bf710765bb3e02858261b43b1d60a50b91d81fdf06bec

    • SSDEEP

      6144:pnce1lxZ2ZIW/9PX5tkLD2QLR+YIVsC9wt4ZIW/9PX5tkLD2QW:pnJ1aI89x6LD26Y9wMI89x6LD21

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks