Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7

e040e1e16a...18.exe

windows7-x64

8

e040e1e16a...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e040e1e16a10aeeb23ce164dee4ea15a_JaffaCakes118

  • Size

    15KB

  • Sample

    240914-qf1meswclf

  • MD5

    e040e1e16a10aeeb23ce164dee4ea15a

  • SHA1

    4f5bebb9fc86372c1cf137d72d2b0764532e052b

  • SHA256

    8f23f9dce6fdd317c9c18ea03c7ca6b9221ba7cf7151bf2a2bb798f0286cb360

  • SHA512

    e926bf58c3d3a56b9dae1a933c75c0fc07f65e2364a247464c1c2f9b2c9a945386c27f095e00e3523d06c415b8f0373233f267bee941fcd19b55dcc00211de17

  • SSDEEP

    192:q1SX8SzvVvJ06zacNm5fJJtF9U5O8ffx61AOTwzNYyVs2Iysga5YHJTsCQqRdAi:+SMS71J0fcOfXmlffkwVIyKGJ4Cz

Score
8/10
discoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      e040e1e16a10aeeb23ce164dee4ea15a_JaffaCakes118

    • Size

      15KB

    • MD5

      e040e1e16a10aeeb23ce164dee4ea15a

    • SHA1

      4f5bebb9fc86372c1cf137d72d2b0764532e052b

    • SHA256

      8f23f9dce6fdd317c9c18ea03c7ca6b9221ba7cf7151bf2a2bb798f0286cb360

    • SHA512

      e926bf58c3d3a56b9dae1a933c75c0fc07f65e2364a247464c1c2f9b2c9a945386c27f095e00e3523d06c415b8f0373233f267bee941fcd19b55dcc00211de17

    • SSDEEP

      192:q1SX8SzvVvJ06zacNm5fJJtF9U5O8ffx61AOTwzNYyVs2Iysga5YHJTsCQqRdAi:+SMS71J0fcOfXmlffkwVIyKGJ4Cz

    Score
    8/10
    discoverypersistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks