Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

bab06d1595...18.exe

windows7-x64

7

bab06d1595...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bab06d1595599bc4a04959804a743bab_JaffaCakes118

  • Size

    51KB

  • Sample

    240823-g477qszarf

  • MD5

    bab06d1595599bc4a04959804a743bab

  • SHA1

    85fa5750aa5dac48fd27462cc05e369b2708d657

  • SHA256

    19fc974bdb44320746ac108a840fae635698d31938b164073d91bbafeac00949

  • SHA512

    94bb6bc33a3937c84a2fedf6f1db6d55e10302e5186c9d1d56d5304f2f0b3db4fb055d6d4dc7ed04ed7c2646877251b2244635f1a68c983280d359c32a5e8a25

  • SSDEEP

    384:ZXPXaQ90vj9k7VDGLl4Twf6mQNll9y/4:ZPaQ2vJk7VyLlYwimQzW/

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      bab06d1595599bc4a04959804a743bab_JaffaCakes118

    • Size

      51KB

    • MD5

      bab06d1595599bc4a04959804a743bab

    • SHA1

      85fa5750aa5dac48fd27462cc05e369b2708d657

    • SHA256

      19fc974bdb44320746ac108a840fae635698d31938b164073d91bbafeac00949

    • SHA512

      94bb6bc33a3937c84a2fedf6f1db6d55e10302e5186c9d1d56d5304f2f0b3db4fb055d6d4dc7ed04ed7c2646877251b2244635f1a68c983280d359c32a5e8a25

    • SSDEEP

      384:ZXPXaQ90vj9k7VDGLl4Twf6mQNll9y/4:ZPaQ2vJk7VyLlYwimQzW/

    Score
    7/10
    discoveryupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks