Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

b366059a33...18.exe

windows7-x64

8

b366059a33...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b366059a33151ceeaa20981f73a60b99_JaffaCakes118

  • Size

    122KB

  • Sample

    240821-pazmhaxere

  • MD5

    b366059a33151ceeaa20981f73a60b99

  • SHA1

    94c847040c554b0e1a1c941c39a6f68b03398be6

  • SHA256

    77ae9a306194983c12c7870e6e6e9853f5ee20f4a496d7dd83404d461441593f

  • SHA512

    8f3d79eccff8bcb08f8b72fb2ca76caaa80ea3e68008f3d1b02a14b634ef36828d74ae60436767c291b29a2ba646622c9f725b95dd41fc743ad5312277f6bf65

  • SSDEEP

    3072:iNVhsaFx+PuoStCyf9pzESyjX3NiNgSrgL4:iFFFx+uBbEfNC

Score
8/10
defense_evasiondiscoverypersistence

Malware Config

Targets

    • Target

      b366059a33151ceeaa20981f73a60b99_JaffaCakes118

    • Size

      122KB

    • MD5

      b366059a33151ceeaa20981f73a60b99

    • SHA1

      94c847040c554b0e1a1c941c39a6f68b03398be6

    • SHA256

      77ae9a306194983c12c7870e6e6e9853f5ee20f4a496d7dd83404d461441593f

    • SHA512

      8f3d79eccff8bcb08f8b72fb2ca76caaa80ea3e68008f3d1b02a14b634ef36828d74ae60436767c291b29a2ba646622c9f725b95dd41fc743ad5312277f6bf65

    • SSDEEP

      3072:iNVhsaFx+PuoStCyf9pzESyjX3NiNgSrgL4:iFFFx+uBbEfNC

    Score
    8/10
    defense_evasiondiscoverypersistence

    • Adds policy Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks