Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

d2a0ae6d29...18.exe

windows7-x64

10

d2a0ae6d29...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d2a0ae6d2964a2bb835e574ec0ce7b1e_JaffaCakes118

  • Size

    350KB

  • Sample

    240907-xmyjzayhpn

  • MD5

    d2a0ae6d2964a2bb835e574ec0ce7b1e

  • SHA1

    58d810cb47282308b58bd3b3de47aee8e7b5a4ea

  • SHA256

    c02fdfca1dd42b7a7ad24809ec1ec472989cf6ffe6c8418727c52e9c07ec7284

  • SHA512

    665267a1c67c8c1a31894772aaffb7bfef34364e45c15854f4310c01ec27973eb79552be75491313e0ac4a814f021d6564888fb62b035aa89c7829ec5d6061bf

  • SSDEEP

    6144:Mtm0GJyBL2QE+u6urabqyugzFJ2HZhr2gIO6CdmRM98IMhjSLOSQIo/C/nU:MtmfSuFgzFJ2HbrylM98LjYQQ/n

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      d2a0ae6d2964a2bb835e574ec0ce7b1e_JaffaCakes118

    • Size

      350KB

    • MD5

      d2a0ae6d2964a2bb835e574ec0ce7b1e

    • SHA1

      58d810cb47282308b58bd3b3de47aee8e7b5a4ea

    • SHA256

      c02fdfca1dd42b7a7ad24809ec1ec472989cf6ffe6c8418727c52e9c07ec7284

    • SHA512

      665267a1c67c8c1a31894772aaffb7bfef34364e45c15854f4310c01ec27973eb79552be75491313e0ac4a814f021d6564888fb62b035aa89c7829ec5d6061bf

    • SSDEEP

      6144:Mtm0GJyBL2QE+u6urabqyugzFJ2HZhr2gIO6CdmRM98IMhjSLOSQIo/C/nU:MtmfSuFgzFJ2HbrylM98LjYQQ/n

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks