Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

d9b920663d...18.exe

windows7-x64

7

d9b920663d...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9b920663dab43dbd20f8f0554947cb5_JaffaCakes118

  • Size

    361KB

  • Sample

    240911-gfjjgawdjc

  • MD5

    d9b920663dab43dbd20f8f0554947cb5

  • SHA1

    ee92cabd75c0bbbae52a7989dab0d36c49ead4b0

  • SHA256

    8ab2bca76fcb9ffc7d6ae9cd2759a2dc6b7b88d6c481ebc376cc21cf94888fe8

  • SHA512

    4b7b76510e5b6a0c798963f166d36bcb5e38f51772eefcd96396429feff4b6cd8a808e2252ff85916a218ae0ae4db42e295225b3345b18cf7dea09daa4f58495

  • SSDEEP

    6144:F86TJmmYlnW2PRTTC0VRNhP/WsnxiP8Au0e:FxPYIWBhVPesno8r5

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      d9b920663dab43dbd20f8f0554947cb5_JaffaCakes118

    • Size

      361KB

    • MD5

      d9b920663dab43dbd20f8f0554947cb5

    • SHA1

      ee92cabd75c0bbbae52a7989dab0d36c49ead4b0

    • SHA256

      8ab2bca76fcb9ffc7d6ae9cd2759a2dc6b7b88d6c481ebc376cc21cf94888fe8

    • SHA512

      4b7b76510e5b6a0c798963f166d36bcb5e38f51772eefcd96396429feff4b6cd8a808e2252ff85916a218ae0ae4db42e295225b3345b18cf7dea09daa4f58495

    • SSDEEP

      6144:F86TJmmYlnW2PRTTC0VRNhP/WsnxiP8Au0e:FxPYIWBhVPesno8r5

    Score
    7/10
    discoverypersistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks