Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

add181eaa1...18.exe

windows7-x64

8

add181eaa1...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    add181eaa1a4e64ae1b95aacc55124ee_JaffaCakes118

  • Size

    376KB

  • Sample

    240820-est5mawgpk

  • MD5

    add181eaa1a4e64ae1b95aacc55124ee

  • SHA1

    0fd69fac453ee261d6f8c070f7dfafef1ede38c2

  • SHA256

    01da5a7dbf23a5c4a3cc405379611a04505ee4acd54b2f633e98834f787aa03a

  • SHA512

    28e1ffcc0d94c49fded5585691c6b744f746bcc5888a04ee4b7cc0e5e5af6a3ee8d7f36e72f8316dfe9590a8af1d0112f56280eb898a4795be81f4f3267d7abe

  • SSDEEP

    6144:8MjURUwzhC2O+AWMabds/VwuivUkcQzX5yj6i4pfoaOAt5aUwO46TTT6AvmfAO:WUR2O+AW3vkGKLULvrm

Score
8/10
defense_evasiondiscoverypersistence

Malware Config

Targets

    • Target

      add181eaa1a4e64ae1b95aacc55124ee_JaffaCakes118

    • Size

      376KB

    • MD5

      add181eaa1a4e64ae1b95aacc55124ee

    • SHA1

      0fd69fac453ee261d6f8c070f7dfafef1ede38c2

    • SHA256

      01da5a7dbf23a5c4a3cc405379611a04505ee4acd54b2f633e98834f787aa03a

    • SHA512

      28e1ffcc0d94c49fded5585691c6b744f746bcc5888a04ee4b7cc0e5e5af6a3ee8d7f36e72f8316dfe9590a8af1d0112f56280eb898a4795be81f4f3267d7abe

    • SSDEEP

      6144:8MjURUwzhC2O+AWMabds/VwuivUkcQzX5yj6i4pfoaOAt5aUwO46TTT6AvmfAO:WUR2O+AW3vkGKLULvrm

    Score
    8/10
    defense_evasiondiscoverypersistence

    • Server Software Component: Terminal Services DLL

      persistence

    • Deletes itself

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks