Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

d0358254ac...18.exe

windows7-x64

10

d0358254ac...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d0358254ac3378f4c5892d26ae9fed04_JaffaCakes118

  • Size

    127KB

  • Sample

    240906-w9dbwasarm

  • MD5

    d0358254ac3378f4c5892d26ae9fed04

  • SHA1

    5291286f4843e87be0e7e9d2bce8a5d0a7e13575

  • SHA256

    448b0b93c0fac0ef8827f7ffa5098250f0a03aed8e189c42fd4a5e04b1018033

  • SHA512

    63f00db92384d4a5b4f09f6bd68a4fbbac817cfadb10d6188e0433402688791d11143fbfca0eebf51434a34c81a59dc2cab961fc37f134046d673b020a6c59c7

  • SSDEEP

    3072:UHO5Up0+TgJ7ub7uZ4CM1zXXcgNcO0nPVQ/5bR7+muaf5UJv:dy0yU7ubqZpUXJmOoq3hQ

Score
10/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      d0358254ac3378f4c5892d26ae9fed04_JaffaCakes118

    • Size

      127KB

    • MD5

      d0358254ac3378f4c5892d26ae9fed04

    • SHA1

      5291286f4843e87be0e7e9d2bce8a5d0a7e13575

    • SHA256

      448b0b93c0fac0ef8827f7ffa5098250f0a03aed8e189c42fd4a5e04b1018033

    • SHA512

      63f00db92384d4a5b4f09f6bd68a4fbbac817cfadb10d6188e0433402688791d11143fbfca0eebf51434a34c81a59dc2cab961fc37f134046d673b020a6c59c7

    • SSDEEP

      3072:UHO5Up0+TgJ7ub7uZ4CM1zXXcgNcO0nPVQ/5bR7+muaf5UJv:dy0yU7ubqZpUXJmOoq3hQ

    Score
    10/10
    discoverypersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Deletes itself

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks