Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

ae9811f3c2...18.exe

windows7-x64

6

ae9811f3c2...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ae9811f3c231cf718783e2593c6b5182_JaffaCakes118

  • Size

    32KB

  • Sample

    240820-kvpwksxbmr

  • MD5

    ae9811f3c231cf718783e2593c6b5182

  • SHA1

    b439b8652b47aff81bcfc7ae1b84064d35fb9857

  • SHA256

    1330c7c0fb50c155dc57cc2ae786f9c73007b1b3ef1ab54fd49a32f2871aff67

  • SHA512

    0091deb909b8f3bde16aa8d46bb072587acf4dab2b946f824f33f2a8f63b21100ea19a9e9ec89a0bbb469adcfc4a7ae0083f1a5d5b7fe5fb1c3277cef1e16362

  • SSDEEP

    384:f98xUHQl/sT5ayOny4/q8zLeiEerLkWYga/lIhDtrzt/nOGTEi7pg:WwvInBqopHxYxIhDtrztvO0g

Score
6/10
discoverypersistence

Malware Config

Targets

    • Target

      ae9811f3c231cf718783e2593c6b5182_JaffaCakes118

    • Size

      32KB

    • MD5

      ae9811f3c231cf718783e2593c6b5182

    • SHA1

      b439b8652b47aff81bcfc7ae1b84064d35fb9857

    • SHA256

      1330c7c0fb50c155dc57cc2ae786f9c73007b1b3ef1ab54fd49a32f2871aff67

    • SHA512

      0091deb909b8f3bde16aa8d46bb072587acf4dab2b946f824f33f2a8f63b21100ea19a9e9ec89a0bbb469adcfc4a7ae0083f1a5d5b7fe5fb1c3277cef1e16362

    • SSDEEP

      384:f98xUHQl/sT5ayOny4/q8zLeiEerLkWYga/lIhDtrzt/nOGTEi7pg:WwvInBqopHxYxIhDtrztvO0g

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks