Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

b313dbd6f5...18.exe

windows7-x64

10

b313dbd6f5...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b313dbd6f5d7a1c6c363564eb9ccec6f_JaffaCakes118

  • Size

    436KB

  • Sample

    240821-mckj9asgme

  • MD5

    b313dbd6f5d7a1c6c363564eb9ccec6f

  • SHA1

    6d25a9afa3a1a76b4bb7685d298fc5707736d859

  • SHA256

    e37cfc052153fe564c96a7c1c7515f052b45188541d3c2144970930df7826161

  • SHA512

    96345f48c6f4ff1c4237e9d1cd9afc7efcec8aa0700191c97e674965ed650ae0ecca11c81c87940d44669d2f57b77c72497470049500c1ea05fd9fb79a666d9d

  • SSDEEP

    6144:96pbDgfKqWV42Tzliljy+CGuWlxB95T42Xx76DSM+TykvmDZru5FX4A:9sqK1V4uzliphPB95TmDS72ZYx

Score
10/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      b313dbd6f5d7a1c6c363564eb9ccec6f_JaffaCakes118

    • Size

      436KB

    • MD5

      b313dbd6f5d7a1c6c363564eb9ccec6f

    • SHA1

      6d25a9afa3a1a76b4bb7685d298fc5707736d859

    • SHA256

      e37cfc052153fe564c96a7c1c7515f052b45188541d3c2144970930df7826161

    • SHA512

      96345f48c6f4ff1c4237e9d1cd9afc7efcec8aa0700191c97e674965ed650ae0ecca11c81c87940d44669d2f57b77c72497470049500c1ea05fd9fb79a666d9d

    • SSDEEP

      6144:96pbDgfKqWV42Tzliljy+CGuWlxB95T42Xx76DSM+TykvmDZru5FX4A:9sqK1V4uzliphPB95TmDS72ZYx

    Score
    10/10
    discoveryevasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks