Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

d3a9bd7b96...18.exe

windows7-x64

10

d3a9bd7b96...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d3a9bd7b96b5f93f65530bf12bd36223_JaffaCakes118

  • Size

    196KB

  • Sample

    240908-ga2g4azckl

  • MD5

    d3a9bd7b96b5f93f65530bf12bd36223

  • SHA1

    092e52b5881502182815a77aa7e95fa718df77d5

  • SHA256

    fd2d6cb80861a044234418f61cbc1782da30ce148b5f648ac9096eadb3ccd43b

  • SHA512

    db234140cbb917ed2b2365e089dd829147b7c1122383987fb3aa450214d67a3bc125af0b9bb7709850460e37ef9627de8cee5d2e641e8c2cf65ce52346d4e92c

  • SSDEEP

    3072:uy1iAgq0tQ9nLHbB9WmvA7vejJWKvE+KmMW:DT4QxL7B9WjjejJW5i

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      d3a9bd7b96b5f93f65530bf12bd36223_JaffaCakes118

    • Size

      196KB

    • MD5

      d3a9bd7b96b5f93f65530bf12bd36223

    • SHA1

      092e52b5881502182815a77aa7e95fa718df77d5

    • SHA256

      fd2d6cb80861a044234418f61cbc1782da30ce148b5f648ac9096eadb3ccd43b

    • SHA512

      db234140cbb917ed2b2365e089dd829147b7c1122383987fb3aa450214d67a3bc125af0b9bb7709850460e37ef9627de8cee5d2e641e8c2cf65ce52346d4e92c

    • SSDEEP

      3072:uy1iAgq0tQ9nLHbB9WmvA7vejJWKvE+KmMW:DT4QxL7B9WjjejJW5i

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks