Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

d439c5ee84...18.exe

windows7-x64

7

d439c5ee84...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d439c5ee84719dab3c6d9dd2ed0fbf87_JaffaCakes118

  • Size

    141KB

  • Sample

    240908-naxmgavfje

  • MD5

    d439c5ee84719dab3c6d9dd2ed0fbf87

  • SHA1

    7e2efb25c2cff3d571852ae2387f69111eb3a4be

  • SHA256

    ef0f4381dec9bcd2151456ea30f3aa92dd981919326b3ae2c6874bc06580cb65

  • SHA512

    938d2e265c9f3bb43802f6a609ed1bd335bb2c08174eac46bd4e669b1f24d1bebf4b10f6a35d0cd077a4228434218af058502b2f3b66cc1b1363c7e4af10ea2b

  • SSDEEP

    3072:iHGFw1IOjHVDwb2RUPjSm+TMdOfM/QA9GLsqfyc7G/BlYb:imF9s1kJ+K7/QmGLstcoB4

Score
7/10
aspackv2discoverypersistenceupx

Malware Config

Targets

    • Target

      d439c5ee84719dab3c6d9dd2ed0fbf87_JaffaCakes118

    • Size

      141KB

    • MD5

      d439c5ee84719dab3c6d9dd2ed0fbf87

    • SHA1

      7e2efb25c2cff3d571852ae2387f69111eb3a4be

    • SHA256

      ef0f4381dec9bcd2151456ea30f3aa92dd981919326b3ae2c6874bc06580cb65

    • SHA512

      938d2e265c9f3bb43802f6a609ed1bd335bb2c08174eac46bd4e669b1f24d1bebf4b10f6a35d0cd077a4228434218af058502b2f3b66cc1b1363c7e4af10ea2b

    • SSDEEP

      3072:iHGFw1IOjHVDwb2RUPjSm+TMdOfM/QA9GLsqfyc7G/BlYb:imF9s1kJ+K7/QmGLstcoB4

    Score
    7/10
    aspackv2discoverypersistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks