Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

aa5d35e8a0...18.exe

windows7-x64

10

aa5d35e8a0...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa5d35e8a06a26e1d765b14d98987b34_JaffaCakes118

  • Size

    72KB

  • Sample

    240819-ktts5syamm

  • MD5

    aa5d35e8a06a26e1d765b14d98987b34

  • SHA1

    af0f50ae9757e6b02561ffe2ccdece94fd6c5382

  • SHA256

    c08a4c5ebe21926616e2270067762689f88d6a1bc6662576272f075770c906f4

  • SHA512

    e3cd02e2446e37ed89e7e20092863c5029709921b758d711bf65d0f4bb95d766894d56b989cda3fb1bb2bcca82464a17c7e7858dbed3b90acf4a5ffcd3f3040c

  • SSDEEP

    1536:ZCxFYReRz2WHtHRHzH6tLj5YpQqNldFeLDNlN1yHzDR2LYpyTU7gt:87YReRGtLj5YpQqNldFeLDNlN11

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      aa5d35e8a06a26e1d765b14d98987b34_JaffaCakes118

    • Size

      72KB

    • MD5

      aa5d35e8a06a26e1d765b14d98987b34

    • SHA1

      af0f50ae9757e6b02561ffe2ccdece94fd6c5382

    • SHA256

      c08a4c5ebe21926616e2270067762689f88d6a1bc6662576272f075770c906f4

    • SHA512

      e3cd02e2446e37ed89e7e20092863c5029709921b758d711bf65d0f4bb95d766894d56b989cda3fb1bb2bcca82464a17c7e7858dbed3b90acf4a5ffcd3f3040c

    • SSDEEP

      1536:ZCxFYReRz2WHtHRHzH6tLj5YpQqNldFeLDNlN1yHzDR2LYpyTU7gt:87YReRGtLj5YpQqNldFeLDNlN11

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks