Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

c962c07e57...18.exe

windows7-x64

10

c962c07e57...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c962c07e570afa52705b0243d3f64dd8_JaffaCakes118

  • Size

    433KB

  • Sample

    240829-w626tsvfnh

  • MD5

    c962c07e570afa52705b0243d3f64dd8

  • SHA1

    d8d6af8032bf13d783f179fa4f53a57bebdbe844

  • SHA256

    2df736094b0b2c3a5484c3d3f1547a8e4744e7168d7fc31ebb1475e4cb431bb9

  • SHA512

    d608673741c7a7b7e7d510681686231e39ea135a7a9969e098169d4448c47fb1e7c8ba81f27db3aba9588eb09753c7ef2057094b03209b5505ad0411f64a0d87

  • SSDEEP

    6144:ZhJkHnxdLinnJ+ql+zQ6+ZY7HdExUGvud7GjBPO4a4SbywRLbpgW0zPnP:ZhJwqnJ+DmYxExXuZGNDSb1dqW0zH

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      c962c07e570afa52705b0243d3f64dd8_JaffaCakes118

    • Size

      433KB

    • MD5

      c962c07e570afa52705b0243d3f64dd8

    • SHA1

      d8d6af8032bf13d783f179fa4f53a57bebdbe844

    • SHA256

      2df736094b0b2c3a5484c3d3f1547a8e4744e7168d7fc31ebb1475e4cb431bb9

    • SHA512

      d608673741c7a7b7e7d510681686231e39ea135a7a9969e098169d4448c47fb1e7c8ba81f27db3aba9588eb09753c7ef2057094b03209b5505ad0411f64a0d87

    • SSDEEP

      6144:ZhJkHnxdLinnJ+ql+zQ6+ZY7HdExUGvud7GjBPO4a4SbywRLbpgW0zPnP:ZhJwqnJ+DmYxExXuZGNDSb1dqW0zH

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks