Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

c1a3ccc0d8...18.exe

windows7-x64

10

c1a3ccc0d8...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c1a3ccc0d840b9fce75fc1aff4638aa7_JaffaCakes118

  • Size

    204KB

  • Sample

    240825-1g42cawfjb

  • MD5

    c1a3ccc0d840b9fce75fc1aff4638aa7

  • SHA1

    2c1b04da0b5cf68afad297b68c67b03101b7bd80

  • SHA256

    f5a8d30578442b6a2419906dad36d0e75ce5d45b0444f64adfa8684fc3590227

  • SHA512

    5dce5906e8315745409ad688916811f20b3f896c91f7cf7f3655645161bd785cfe3fb1cae4397e375f0d813cd5b87441806eb4e9a8eb3c13b4757c7ac1782bae

  • SSDEEP

    1536:Qv+OouHo1vzxHwxWDExNy3tQ9CW5EZWHakMwP9W6uXNh9h1AWa11GBPIdRONd+ww:CHo1DD00tQ9nLHbB9WTk9+Jgqmltvx

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      c1a3ccc0d840b9fce75fc1aff4638aa7_JaffaCakes118

    • Size

      204KB

    • MD5

      c1a3ccc0d840b9fce75fc1aff4638aa7

    • SHA1

      2c1b04da0b5cf68afad297b68c67b03101b7bd80

    • SHA256

      f5a8d30578442b6a2419906dad36d0e75ce5d45b0444f64adfa8684fc3590227

    • SHA512

      5dce5906e8315745409ad688916811f20b3f896c91f7cf7f3655645161bd785cfe3fb1cae4397e375f0d813cd5b87441806eb4e9a8eb3c13b4757c7ac1782bae

    • SSDEEP

      1536:Qv+OouHo1vzxHwxWDExNy3tQ9CW5EZWHakMwP9W6uXNh9h1AWa11GBPIdRONd+ww:CHo1DD00tQ9nLHbB9WTk9+Jgqmltvx

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks