Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

d1140e289b...18.exe

windows7-x64

7

d1140e289b...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d1140e289b7e5d451755ad2a1b9da893_JaffaCakes118

  • Size

    172KB

  • Sample

    240907-e4vwasvdpq

  • MD5

    d1140e289b7e5d451755ad2a1b9da893

  • SHA1

    50cbd0bf239bfa0ce1c19f87fe3450668802facd

  • SHA256

    2f86b1e22a769e648fcc221a0e567528d27c2ac2932f90a82587ff78b07429ea

  • SHA512

    e52d729ee50e57a5767e967b8e7b53ebe863a4745d5705335fb0d8edd40d8a9a7a578744519a78e9eb8c2286b45587a2d834092368a8db944961cbb30622c30e

  • SSDEEP

    3072:raKqmTqA7VYoeSR/WBqNgZlUYZTi8E/H3b0LVeWkUOjSpqc54kjefmK3HtnMVj0:ZBTjYSR//Nsti5/XGVeRUjqlkdQR

Score
7/10
defense_evasiondiscoverypersistenceupx

Malware Config

Targets

    • Target

      d1140e289b7e5d451755ad2a1b9da893_JaffaCakes118

    • Size

      172KB

    • MD5

      d1140e289b7e5d451755ad2a1b9da893

    • SHA1

      50cbd0bf239bfa0ce1c19f87fe3450668802facd

    • SHA256

      2f86b1e22a769e648fcc221a0e567528d27c2ac2932f90a82587ff78b07429ea

    • SHA512

      e52d729ee50e57a5767e967b8e7b53ebe863a4745d5705335fb0d8edd40d8a9a7a578744519a78e9eb8c2286b45587a2d834092368a8db944961cbb30622c30e

    • SSDEEP

      3072:raKqmTqA7VYoeSR/WBqNgZlUYZTi8E/H3b0LVeWkUOjSpqc54kjefmK3HtnMVj0:ZBTjYSR//Nsti5/XGVeRUjqlkdQR

    Score
    7/10
    defense_evasiondiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Hide Artifacts: Hidden Files and Directories

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks