Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

d72a277b30...18.exe

windows7-x64

10

d72a277b30...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d72a277b30ef3604b4b2e78dd21512bd_JaffaCakes118

  • Size

    70KB

  • Sample

    240909-1wzeeavalb

  • MD5

    d72a277b30ef3604b4b2e78dd21512bd

  • SHA1

    258c27a3aa9f631621ef82136524e2df91374c9a

  • SHA256

    e7c65fb736f4ec9a78be81c8b7611cb548285b7021b72d9659d0708ad3ccf748

  • SHA512

    21c6f5ec2934137a78d9aee95831c42d69b5186adaf0c9eb963597e01f27666152f470eec45e9d94d36940d2f9b0968b25edb314c0994a27641bfbbc9399f5fc

  • SSDEEP

    1536:I+0gFMj1AaiN7OaM1C9rRtpl8XcFYINoIadoqEXrY:rNDaiN7ORC9rvwXcFH6yrY

Score
10/10
discoveryevasionpersistenceupx

Malware Config

Targets

    • Target

      d72a277b30ef3604b4b2e78dd21512bd_JaffaCakes118

    • Size

      70KB

    • MD5

      d72a277b30ef3604b4b2e78dd21512bd

    • SHA1

      258c27a3aa9f631621ef82136524e2df91374c9a

    • SHA256

      e7c65fb736f4ec9a78be81c8b7611cb548285b7021b72d9659d0708ad3ccf748

    • SHA512

      21c6f5ec2934137a78d9aee95831c42d69b5186adaf0c9eb963597e01f27666152f470eec45e9d94d36940d2f9b0968b25edb314c0994a27641bfbbc9399f5fc

    • SSDEEP

      1536:I+0gFMj1AaiN7OaM1C9rRtpl8XcFYINoIadoqEXrY:rNDaiN7ORC9rvwXcFH6yrY

    Score
    10/10
    discoveryevasionpersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Modifies firewall policy service

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Drops file in Drivers directory

    • Deletes itself

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks