Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

d30cd1d680...18.exe

windows7-x64

10

d30cd1d680...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d30cd1d6803bb09eed8e47195498ce20_JaffaCakes118

  • Size

    60KB

  • Sample

    240907-3fv36atdqf

  • MD5

    d30cd1d6803bb09eed8e47195498ce20

  • SHA1

    f1f16592dd4eb327b83536fa1bde1ee1e23d75f2

  • SHA256

    0ce948f16d3cf08534fb5086ac5a73e7273ac34da7ab73a5a58b2885e5e05b88

  • SHA512

    ba98fb9709dcfeb92de3b02f62d1caece0e4b41aa53f03cb8fb4e250bcf33ce266f0a416935e2816e81fa3b2a574747eb07460207611636fc6dcc44d28ed4c24

  • SSDEEP

    1536:ClilK7Dry+Mu+duaU33QFBq7vTonxO00qkxPi0ZUnouy8cL:ClilK7DryjutQ3q7vEnxBbsPi0Zkout4

Score
10/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      d30cd1d6803bb09eed8e47195498ce20_JaffaCakes118

    • Size

      60KB

    • MD5

      d30cd1d6803bb09eed8e47195498ce20

    • SHA1

      f1f16592dd4eb327b83536fa1bde1ee1e23d75f2

    • SHA256

      0ce948f16d3cf08534fb5086ac5a73e7273ac34da7ab73a5a58b2885e5e05b88

    • SHA512

      ba98fb9709dcfeb92de3b02f62d1caece0e4b41aa53f03cb8fb4e250bcf33ce266f0a416935e2816e81fa3b2a574747eb07460207611636fc6dcc44d28ed4c24

    • SSDEEP

      1536:ClilK7Dry+Mu+duaU33QFBq7vTonxO00qkxPi0ZUnouy8cL:ClilK7DryjutQ3q7vEnxBbsPi0Zkout4

    Score
    10/10
    discoverypersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks