Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

b906794f8a...18.exe

windows7-x64

7

b906794f8a...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b906794f8ae289ac54682bcc202e2b01_JaffaCakes118

  • Size

    298KB

  • Sample

    240822-y5jzzayenj

  • MD5

    b906794f8ae289ac54682bcc202e2b01

  • SHA1

    bb29c0989263505adcf21b065cf29e044f56774a

  • SHA256

    35bc1d7c3b71c3948947a87fb06d164dddecd9abd7753bf4a3f37d07eb0eab81

  • SHA512

    ad477c840404853066205b69df229f4e4128a033703a527ad957687a486adc28f36cb7f970ef72215e73bae3913439159d0776e35b5fc6a36c3e346bcecc016a

  • SSDEEP

    6144:RawPHWSIg118HWULKjC7Dif1mO45xFVN0cp0cyIF:RDjIaC7Dy45xFko0cyIF

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      b906794f8ae289ac54682bcc202e2b01_JaffaCakes118

    • Size

      298KB

    • MD5

      b906794f8ae289ac54682bcc202e2b01

    • SHA1

      bb29c0989263505adcf21b065cf29e044f56774a

    • SHA256

      35bc1d7c3b71c3948947a87fb06d164dddecd9abd7753bf4a3f37d07eb0eab81

    • SHA512

      ad477c840404853066205b69df229f4e4128a033703a527ad957687a486adc28f36cb7f970ef72215e73bae3913439159d0776e35b5fc6a36c3e346bcecc016a

    • SSDEEP

      6144:RawPHWSIg118HWULKjC7Dif1mO45xFVN0cp0cyIF:RDjIaC7Dy45xFko0cyIF

    Score
    7/10
    discoverypersistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks