Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

db848453bd...18.exe

windows7-x64

7

db848453bd...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    db848453bdaff3aa40677701561444c0_JaffaCakes118

  • Size

    594KB

  • Sample

    240912-a35a5ascjp

  • MD5

    db848453bdaff3aa40677701561444c0

  • SHA1

    0a43616075e5df1a9f471ed30be8e7c72e5b9381

  • SHA256

    10097a4e6a39b90fb6c9db2eb1dedb4a1f22d8bec2eb3db7dc9428d6ee2980ca

  • SHA512

    2034925fe2f055b83caff4ba891e7b6784f522f13f11d060e08aae8ec95bdf14b0b3b1f206b4a8a8ff6f87e2f97e1fa6eae3b15b3081d85b942a584bb4aa84e5

  • SSDEEP

    12288:C6WwObMIrSKlG0AXW2ifIC6M4nkwK+w8Gh7nrXb4N0Dw7U:xROYIrSL/mfQbw8abxw7

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      db848453bdaff3aa40677701561444c0_JaffaCakes118

    • Size

      594KB

    • MD5

      db848453bdaff3aa40677701561444c0

    • SHA1

      0a43616075e5df1a9f471ed30be8e7c72e5b9381

    • SHA256

      10097a4e6a39b90fb6c9db2eb1dedb4a1f22d8bec2eb3db7dc9428d6ee2980ca

    • SHA512

      2034925fe2f055b83caff4ba891e7b6784f522f13f11d060e08aae8ec95bdf14b0b3b1f206b4a8a8ff6f87e2f97e1fa6eae3b15b3081d85b942a584bb4aa84e5

    • SSDEEP

      12288:C6WwObMIrSKlG0AXW2ifIC6M4nkwK+w8Gh7nrXb4N0Dw7U:xROYIrSL/mfQbw8abxw7

    Score
    7/10
    discoverypersistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks