Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

ca1b1e656f...18.exe

windows7-x64

10

ca1b1e656f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ca1b1e656f2e200dc34583bbc0821279_JaffaCakes118

  • Size

    11.8MB

  • Sample

    240830-dk7v3svhqj

  • MD5

    ca1b1e656f2e200dc34583bbc0821279

  • SHA1

    a42dfe73f35d48569707f7eabd855c7a307d09a6

  • SHA256

    60c796eaec6caed49fc2c0e8ca7eac1cb33f731e681c4bebb90061d080cd2647

  • SHA512

    460c9404ec3324f005688e4b877b050806246709236298bdecafda553fe1da2642360f016d819238da843c94ba5ffd80ae1aed7a7ef14d6e95dea7fbce9603ba

  • SSDEEP

    49152:kGouwOh9G+y8iJccpp9nifsOp2xRaV/SPUsN/Fjv4BIGII4m3DVhy5T7VV7uE8h7:kGcs0+y1A42ATRUIslb

Score
10/10
grandoreirobankerdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      ca1b1e656f2e200dc34583bbc0821279_JaffaCakes118

    • Size

      11.8MB

    • MD5

      ca1b1e656f2e200dc34583bbc0821279

    • SHA1

      a42dfe73f35d48569707f7eabd855c7a307d09a6

    • SHA256

      60c796eaec6caed49fc2c0e8ca7eac1cb33f731e681c4bebb90061d080cd2647

    • SHA512

      460c9404ec3324f005688e4b877b050806246709236298bdecafda553fe1da2642360f016d819238da843c94ba5ffd80ae1aed7a7ef14d6e95dea7fbce9603ba

    • SSDEEP

      49152:kGouwOh9G+y8iJccpp9nifsOp2xRaV/SPUsN/Fjv4BIGII4m3DVhy5T7VV7uE8h7:kGcs0+y1A42ATRUIslb

    Score
    10/10
    grandoreirobankerdiscoverypersistencetrojan

    • Detects Grandoreiro payload

    • Grandoreiro

      Part of a group of banking trojans, targeting Spanish and Portuguese speaking countries.

      trojanbankergrandoreiro

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks