Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

b381ebee1e...18.exe

windows7-x64

10

b381ebee1e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b381ebee1e140d4746116c8be69d4004_JaffaCakes118

  • Size

    72KB

  • Sample

    240821-p1bclaygnc

  • MD5

    b381ebee1e140d4746116c8be69d4004

  • SHA1

    00c4e07af66deb3fb115cca58cc5b3474f670c4d

  • SHA256

    c08fcafc51a9f96b0f3c5f7add0a886b4273d145ff7ebd8b9076977ffcaf3b44

  • SHA512

    6bde5fe31f0bb964ad4428532be8e3c2d5dfac9f64228427081a7d5e9ef1a108a0fdbe87b7a191df2875cf7ee11db172112cae10c57a80ae98a37de7f34b8d1e

  • SSDEEP

    384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2i:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrO

Score
10/10
discoveryevasion

Malware Config

Targets

    • Target

      b381ebee1e140d4746116c8be69d4004_JaffaCakes118

    • Size

      72KB

    • MD5

      b381ebee1e140d4746116c8be69d4004

    • SHA1

      00c4e07af66deb3fb115cca58cc5b3474f670c4d

    • SHA256

      c08fcafc51a9f96b0f3c5f7add0a886b4273d145ff7ebd8b9076977ffcaf3b44

    • SHA512

      6bde5fe31f0bb964ad4428532be8e3c2d5dfac9f64228427081a7d5e9ef1a108a0fdbe87b7a191df2875cf7ee11db172112cae10c57a80ae98a37de7f34b8d1e

    • SSDEEP

      384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2i:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrO

    Score
    10/10
    discoveryevasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks