Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

adcce65d91...18.exe

windows7-x64

8

adcce65d91...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    adcce65d918543ca2b1851de20cd2753_JaffaCakes118

  • Size

    23KB

  • Sample

    240820-emywmawfjj

  • MD5

    adcce65d918543ca2b1851de20cd2753

  • SHA1

    049502f6aa12e07f0ea5f76bd8cca1f353f37c92

  • SHA256

    3c16b6a4a6c166976fe54ed31171e218ec0c9036375ee6835b42dee7f1198921

  • SHA512

    33fb8a3fd0c8212bfdf267eceb611d696b9d0dcd286ef80fabb9c2cabdf19d900f3d3319604a03f910b50f96963d843364eca80375cb6b6a5a729419bf4cc084

  • SSDEEP

    384:zrwkVdcAYqetz9U4HD2iCrFuu4dGE+KN0f0onfn1wQFT7OcZme0y68BnaFn8uCiQ:zrx4AYqSD298VGD+/QFT6cZj0y6Yap8Z

Score
8/10
defense_evasiondiscoverypersistence

Malware Config

Targets

    • Target

      adcce65d918543ca2b1851de20cd2753_JaffaCakes118

    • Size

      23KB

    • MD5

      adcce65d918543ca2b1851de20cd2753

    • SHA1

      049502f6aa12e07f0ea5f76bd8cca1f353f37c92

    • SHA256

      3c16b6a4a6c166976fe54ed31171e218ec0c9036375ee6835b42dee7f1198921

    • SHA512

      33fb8a3fd0c8212bfdf267eceb611d696b9d0dcd286ef80fabb9c2cabdf19d900f3d3319604a03f910b50f96963d843364eca80375cb6b6a5a729419bf4cc084

    • SSDEEP

      384:zrwkVdcAYqetz9U4HD2iCrFuu4dGE+KN0f0onfn1wQFT7OcZme0y68BnaFn8uCiQ:zrx4AYqSD298VGD+/QFT6cZj0y6Yap8Z

    Score
    8/10
    defense_evasiondiscoverypersistence

    • Drops file in Drivers directory

    • Event Triggered Execution: Image File Execution Options Injection

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks