Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

c10275148b...18.exe

windows7-x64

10

c10275148b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c10275148bb8b062044030c71dce92dc_JaffaCakes118

  • Size

    100KB

  • Sample

    240825-smsaqssdmr

  • MD5

    c10275148bb8b062044030c71dce92dc

  • SHA1

    8b65b38496723d98dc0d24558d9317b404c377fb

  • SHA256

    a6ebcd5ddc0b10ebbd73f623c652d3a159d30cfbb1e7ea5e6a143be65da035c5

  • SHA512

    81f708365f54d99a4ef8f5dff7a2511cf04f9d9c21cf4c5bee14bd7b77b8aab810356894a8a371b12e7d58abe24921c2d60203acfbb4a93fdd31133cda5694c3

  • SSDEEP

    1536:yqV8iAuismyWsORw0wF9MGM9K/lKtNgCMbATbL3N+NM5Ef7NIjnZWr:rOtTLOM5MCnIr

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      c10275148bb8b062044030c71dce92dc_JaffaCakes118

    • Size

      100KB

    • MD5

      c10275148bb8b062044030c71dce92dc

    • SHA1

      8b65b38496723d98dc0d24558d9317b404c377fb

    • SHA256

      a6ebcd5ddc0b10ebbd73f623c652d3a159d30cfbb1e7ea5e6a143be65da035c5

    • SHA512

      81f708365f54d99a4ef8f5dff7a2511cf04f9d9c21cf4c5bee14bd7b77b8aab810356894a8a371b12e7d58abe24921c2d60203acfbb4a93fdd31133cda5694c3

    • SSDEEP

      1536:yqV8iAuismyWsORw0wF9MGM9K/lKtNgCMbATbL3N+NM5Ef7NIjnZWr:rOtTLOM5MCnIr

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks