Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

d21e3b1afd...18.exe

windows7-x64

7

d21e3b1afd...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d21e3b1afd6f4b0d2f55e15c1f156530_JaffaCakes118

  • Size

    194KB

  • Sample

    240907-rhecmszdpa

  • MD5

    d21e3b1afd6f4b0d2f55e15c1f156530

  • SHA1

    8bc51ea7ccede9a8a72f029f8d5bbc27aa270b6f

  • SHA256

    b5d47c4595452582316fff13528f9f708eec64083ee1a297aad975b8f701343e

  • SHA512

    f6ca20b6b51599dec92979b89dbd102e69ca8fa0fb9f66d4236873c01d5cb29ab7d6be04ed15bdd9f34ece67df81847907ce268ecfc0ce26a2b090bfe37cf361

  • SSDEEP

    3072:IKSBLv42GdwNj3Z7Iw21ozcY0UJGYs6Eue3TkxydJ+v0Bb0SWG6/FEuSm4aM6jXz:IxQhdwt08WrBsyqv0gG6/FEuSxGDDx7

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      d21e3b1afd6f4b0d2f55e15c1f156530_JaffaCakes118

    • Size

      194KB

    • MD5

      d21e3b1afd6f4b0d2f55e15c1f156530

    • SHA1

      8bc51ea7ccede9a8a72f029f8d5bbc27aa270b6f

    • SHA256

      b5d47c4595452582316fff13528f9f708eec64083ee1a297aad975b8f701343e

    • SHA512

      f6ca20b6b51599dec92979b89dbd102e69ca8fa0fb9f66d4236873c01d5cb29ab7d6be04ed15bdd9f34ece67df81847907ce268ecfc0ce26a2b090bfe37cf361

    • SSDEEP

      3072:IKSBLv42GdwNj3Z7Iw21ozcY0UJGYs6Eue3TkxydJ+v0Bb0SWG6/FEuSm4aM6jXz:IxQhdwt08WrBsyqv0gG6/FEuSxGDDx7

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks