Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

dc4904ce3d...18.exe

windows7-x64

7

dc4904ce3d...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc4904ce3da34099518ae454667082a3_JaffaCakes118

  • Size

    81KB

  • Sample

    240912-plgwtsvcne

  • MD5

    dc4904ce3da34099518ae454667082a3

  • SHA1

    9c6fd3782571002571e570cc6d63c22277b4c9dd

  • SHA256

    f240c1a0c824adf9d26b1734d00609f9718c8794222e82f1f280276425abec91

  • SHA512

    59012dc7d6f3f37e14eb18102f445de65e54e61213fdb87e296f672c919923886d3fc1803b5225a78b8a5d978f6c768e3b86b53c08243ebb34dc9a466c8a8409

  • SSDEEP

    1536:VIqOQF0+cdsd+Vwu3IhgD5UAOqEILamxPb/4QXmycURay023z:kP+cdsMVwu3IO5mqECz4QXmycufR

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      dc4904ce3da34099518ae454667082a3_JaffaCakes118

    • Size

      81KB

    • MD5

      dc4904ce3da34099518ae454667082a3

    • SHA1

      9c6fd3782571002571e570cc6d63c22277b4c9dd

    • SHA256

      f240c1a0c824adf9d26b1734d00609f9718c8794222e82f1f280276425abec91

    • SHA512

      59012dc7d6f3f37e14eb18102f445de65e54e61213fdb87e296f672c919923886d3fc1803b5225a78b8a5d978f6c768e3b86b53c08243ebb34dc9a466c8a8409

    • SSDEEP

      1536:VIqOQF0+cdsd+Vwu3IhgD5UAOqEILamxPb/4QXmycURay023z:kP+cdsMVwu3IO5mqECz4QXmycufR

    Score
    8/10
    discoverypersistence

    • Adds policy Run key to start application

      persistence

    • Event Triggered Execution: Image File Execution Options Injection

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks