5652c655d7ceb0a87cf5ebfcb8932f9570f125691d9240431d8a31afb028db6e | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

d5f2cdb781...18.exe

windows7-x64

7

d5f2cdb781...18.exe

windows10-2004-x64

7

Sharing

General

Target

d5f2cdb7815b33b499d5c8887cb5c0e2_JaffaCakes118
Size

32KB
Sample

240909-kbraas1hke
MD5

d5f2cdb7815b33b499d5c8887cb5c0e2
SHA1

4851d244dc7789e4868d55e3c66e2205dbff6bcb
SHA256

5652c655d7ceb0a87cf5ebfcb8932f9570f125691d9240431d8a31afb028db6e
SHA512

f4fb730d8cce2dae5d1bd4789ffcce548e5de4e2619a37f968ef7f2efa95e66a87dc410c10ca46a9ab57adfad6e4f37357bac6e9bfa12cd33726a0f320d6c267
SSDEEP

768:4RGo+gKZu+aOTI4kGVlgKYuISt14HHqvX9Sx2hnbcuyD7U:4j+hu+aYkKY8tSxknouy8

Score

7^/10

discovery execution upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

d5f2cdb7815b33b499d5c8887cb5c0e2_JaffaCakes118.exe

Resource

win7-20240903-en

discovery execution upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

d5f2cdb7815b33b499d5c8887cb5c0e2_JaffaCakes118.exe

Resource

win10v2004-20240802-en

discovery execution upx

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  d5f2cdb7815b33b499d5c8887cb5c0e2_JaffaCakes118
- Size
  
  32KB
- MD5
  
  d5f2cdb7815b33b499d5c8887cb5c0e2
- SHA1
  
  4851d244dc7789e4868d55e3c66e2205dbff6bcb
- SHA256
  
  5652c655d7ceb0a87cf5ebfcb8932f9570f125691d9240431d8a31afb028db6e
- SHA512
  
  f4fb730d8cce2dae5d1bd4789ffcce548e5de4e2619a37f968ef7f2efa95e66a87dc410c10ca46a9ab57adfad6e4f37357bac6e9bfa12cd33726a0f320d6c267
- SSDEEP
  
  768:4RGo+gKZu+aOTI4kGVlgKYuISt14HHqvX9Sx2hnbcuyD7U:4j+hu+aYkKY8tSxknouy8
Score

7^/10

discovery execution upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionupx

behavioral2

discoveryexecutionupx

© 2018-2025

Terms | Privacy