Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

d5e8f1c6dc...18.exe

windows7-x64

10

d5e8f1c6dc...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d5e8f1c6dce543ec57f0f107c92ce585_JaffaCakes118

  • Size

    240KB

  • Sample

    240909-jsv45syanr

  • MD5

    d5e8f1c6dce543ec57f0f107c92ce585

  • SHA1

    75f8ae21e1c65b2c0162dc02486b5c46df76d8c7

  • SHA256

    67a26c231cf0b1213169de2a3e588d59dc49a63fe954801c0d6cf2983ada867c

  • SHA512

    68b6a57e54b3ed9c5c05757eb5f88256b2712c1cd46d1580b9c0274ca78d2c8b74a7c4bcf9c8a5ebdf0ad1664debc99d03d2d10e009546c6c479b3bd2aa4a199

  • SSDEEP

    6144:EUA3dwqsNwemAB0EqxF6snji81RUinKchhyXSQL:6dQQJsiw

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      d5e8f1c6dce543ec57f0f107c92ce585_JaffaCakes118

    • Size

      240KB

    • MD5

      d5e8f1c6dce543ec57f0f107c92ce585

    • SHA1

      75f8ae21e1c65b2c0162dc02486b5c46df76d8c7

    • SHA256

      67a26c231cf0b1213169de2a3e588d59dc49a63fe954801c0d6cf2983ada867c

    • SHA512

      68b6a57e54b3ed9c5c05757eb5f88256b2712c1cd46d1580b9c0274ca78d2c8b74a7c4bcf9c8a5ebdf0ad1664debc99d03d2d10e009546c6c479b3bd2aa4a199

    • SSDEEP

      6144:EUA3dwqsNwemAB0EqxF6snji81RUinKchhyXSQL:6dQQJsiw

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks