Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

c1473cc423...18.exe

windows7-x64

7

c1473cc423...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c1473cc42376ef4f3416688bb7b53874_JaffaCakes118

  • Size

    126KB

  • Sample

    240825-wnt3haydnq

  • MD5

    c1473cc42376ef4f3416688bb7b53874

  • SHA1

    d669a9555f576011a15068f61bf884810c572de9

  • SHA256

    cca90e1ff60bebc6f99d2d3aaa8f29851a6f0180a384f3423f260e0201f4c626

  • SHA512

    5cf3b7968369d4999020ce1d7e8e0d2a77d187438e971383f74f9cb29ef319a0ccaf41d1459e3e65de94bc5667d099d859e68c9d6a54c5eac2ac060f291025f0

  • SSDEEP

    3072:WMgV7+zo+r0UeGTUnvSD+DGF9O2Zu34/IU82J+bxFM4:rh4UeGTSvAs20ejBJ2jM4

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      c1473cc42376ef4f3416688bb7b53874_JaffaCakes118

    • Size

      126KB

    • MD5

      c1473cc42376ef4f3416688bb7b53874

    • SHA1

      d669a9555f576011a15068f61bf884810c572de9

    • SHA256

      cca90e1ff60bebc6f99d2d3aaa8f29851a6f0180a384f3423f260e0201f4c626

    • SHA512

      5cf3b7968369d4999020ce1d7e8e0d2a77d187438e971383f74f9cb29ef319a0ccaf41d1459e3e65de94bc5667d099d859e68c9d6a54c5eac2ac060f291025f0

    • SSDEEP

      3072:WMgV7+zo+r0UeGTUnvSD+DGF9O2Zu34/IU82J+bxFM4:rh4UeGTSvAs20ejBJ2jM4

    Score
    7/10
    discoverypersistence

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks