Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

b8dee22db8...18.exe

windows7-x64

7

b8dee22db8...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b8dee22db8524617fceeb0ee62815ae6_JaffaCakes118

  • Size

    151KB

  • Sample

    240822-x9sl8swhjl

  • MD5

    b8dee22db8524617fceeb0ee62815ae6

  • SHA1

    cf5471234667d44316c8e6175f47925938a0dc05

  • SHA256

    55e459082bfb1bdc8dae09a5f5a95cdb73709f9747c6d65968358fd54a7a4f91

  • SHA512

    a5b992c2cb278fd95562aa84597bbf7ef884f5cc57f2da9fb4e039336e39701df596a38e92f2b797cabda44100a5f48d713a131082e72c84f3f41f2bc2c2c1ca

  • SSDEEP

    3072:twxVMhOC/dTDbq91+mno3t4QZQ3rt8iJkoBoyPmbQ4hGpEj:tTfFDbRnOTrt5JboyPgQpG

Score
7/10
defense_evasiondiscovery

Malware Config

Targets

    • Target

      b8dee22db8524617fceeb0ee62815ae6_JaffaCakes118

    • Size

      151KB

    • MD5

      b8dee22db8524617fceeb0ee62815ae6

    • SHA1

      cf5471234667d44316c8e6175f47925938a0dc05

    • SHA256

      55e459082bfb1bdc8dae09a5f5a95cdb73709f9747c6d65968358fd54a7a4f91

    • SHA512

      a5b992c2cb278fd95562aa84597bbf7ef884f5cc57f2da9fb4e039336e39701df596a38e92f2b797cabda44100a5f48d713a131082e72c84f3f41f2bc2c2c1ca

    • SSDEEP

      3072:twxVMhOC/dTDbq91+mno3t4QZQ3rt8iJkoBoyPmbQ4hGpEj:tTfFDbRnOTrt5JboyPgQpG

    Score
    7/10
    discoverydefense_evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks