Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

c01aaaef09...18.exe

windows7-x64

8

c01aaaef09...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c01aaaef09d91bd8b6323c389bd405a8_JaffaCakes118

  • Size

    146KB

  • Sample

    240825-gqw8baycnf

  • MD5

    c01aaaef09d91bd8b6323c389bd405a8

  • SHA1

    7422573eea2ab15f3d7e3926e539c91d9b03f723

  • SHA256

    034fee532bdf148678f0f9a28873290007a56105adda6a9025a27bfb14e34acb

  • SHA512

    0f52af35775a78eabcc16c58a0abeb21984807660c53e2755acb808914877f8a287fddccfa3b14b0cbe03f21742fbcdfcda4ee36e070b40e4dc5b76c92bd27fe

  • SSDEEP

    3072:1THd970tATVnTGAsyA2l/4ZdjX8PTH/A5O6c2F7qRZwDappjR718Xd3:Bv70eSBu/sRXkh0FkZwc

Score
8/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      c01aaaef09d91bd8b6323c389bd405a8_JaffaCakes118

    • Size

      146KB

    • MD5

      c01aaaef09d91bd8b6323c389bd405a8

    • SHA1

      7422573eea2ab15f3d7e3926e539c91d9b03f723

    • SHA256

      034fee532bdf148678f0f9a28873290007a56105adda6a9025a27bfb14e34acb

    • SHA512

      0f52af35775a78eabcc16c58a0abeb21984807660c53e2755acb808914877f8a287fddccfa3b14b0cbe03f21742fbcdfcda4ee36e070b40e4dc5b76c92bd27fe

    • SSDEEP

      3072:1THd970tATVnTGAsyA2l/4ZdjX8PTH/A5O6c2F7qRZwDappjR718Xd3:Bv70eSBu/sRXkh0FkZwc

    Score
    8/10
    discoveryevasionpersistence

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks