Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

8

dd79383953...18.doc

windows7-x64

10

dd79383953...18.doc

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dd79383953ec578ab0e7795247795b5a_JaffaCakes118

  • Size

    251KB

  • Sample

    240913-cr4assydnn

  • MD5

    dd79383953ec578ab0e7795247795b5a

  • SHA1

    6416265f37e0af93823f7e96fb19e1593ed2d8da

  • SHA256

    1bc4a47d0fe2369993ff6f11e93075f7e441de5d443e88719a9787c43f6a277a

  • SHA512

    92f78d00f19df80779fc6151806987922eb1dbddd1134c59f225688aacf7e1988614fb027217c5f1caa7f20953e483717bbeeaae660114e310cfd77f6841899c

  • SSDEEP

    3072:6Yy0u8YGgjv+ZvchmkHcI/o1/Vb6///////////////////////////////////s:C0uXnWFchmmcI/o1/A2yFRq

Score
10/10
discoverymacro

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

http://hoagietesting10.com/wp-content/SJ/
exe.dropper

http://iscamenabe.com/wp-content/1PR/
exe.dropper

http://vietmade.org/wp-admin/8/
exe.dropper

http://www.filamchimovies.com/wp-admin/8/
exe.dropper

https://strattonmobile.com/wp-content/yl/
exe.dropper

https://blog.qgdxzs.com/wp-admin/I/
exe.dropper

http://vietsex.pro/wp-content/PX/

Targets

    • Target

      dd79383953ec578ab0e7795247795b5a_JaffaCakes118

    • Size

      251KB

    • MD5

      dd79383953ec578ab0e7795247795b5a

    • SHA1

      6416265f37e0af93823f7e96fb19e1593ed2d8da

    • SHA256

      1bc4a47d0fe2369993ff6f11e93075f7e441de5d443e88719a9787c43f6a277a

    • SHA512

      92f78d00f19df80779fc6151806987922eb1dbddd1134c59f225688aacf7e1988614fb027217c5f1caa7f20953e483717bbeeaae660114e310cfd77f6841899c

    • SSDEEP

      3072:6Yy0u8YGgjv+ZvchmkHcI/o1/Vb6///////////////////////////////////s:C0uXnWFchmmcI/o1/A2yFRq

    Score
    10/10
    discovery

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks