Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

bdcc4e0f96...18.exe

windows7-x64

10

bdcc4e0f96...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bdcc4e0f965e8e5be8c249ce2c90667f_JaffaCakes118

  • Size

    39KB

  • Sample

    240824-chqy4szepd

  • MD5

    bdcc4e0f965e8e5be8c249ce2c90667f

  • SHA1

    d19af9edee821f2ff73275d4fe8a183b1e8cd7c5

  • SHA256

    15bec42768964321b6bd6b7f90db296d8c6d5297eb27ce3e985e8b2f7ee8881d

  • SHA512

    14e6e3740e4a3ddfa937f98a89f60b2c1af43256c6ce9d98ef5160043e1830379f172c504acf4074b75cff8849ece4b2909b1516fdf81b1ce80347968d935524

  • SSDEEP

    768:HOsiuIUWcgJTPmSfKOsilK0CDm/9oxcmQL2TiexhAfF/684Qf5LuPB5:uslIUhgJPmeNsnHm/IcmuorAf5LFSB5

Score
10/10
discoverypersistence

Malware Config

Extracted

Credentials

  • Protocol:     smtp
  • Host:
    smtp.gmail.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    bubblesuck595

Targets

    • Target

      bdcc4e0f965e8e5be8c249ce2c90667f_JaffaCakes118

    • Size

      39KB

    • MD5

      bdcc4e0f965e8e5be8c249ce2c90667f

    • SHA1

      d19af9edee821f2ff73275d4fe8a183b1e8cd7c5

    • SHA256

      15bec42768964321b6bd6b7f90db296d8c6d5297eb27ce3e985e8b2f7ee8881d

    • SHA512

      14e6e3740e4a3ddfa937f98a89f60b2c1af43256c6ce9d98ef5160043e1830379f172c504acf4074b75cff8849ece4b2909b1516fdf81b1ce80347968d935524

    • SSDEEP

      768:HOsiuIUWcgJTPmSfKOsilK0CDm/9oxcmQL2TiexhAfF/684Qf5LuPB5:uslIUhgJPmeNsnHm/IcmuorAf5LFSB5

    Score
    10/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks