Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

e1f0a2e1c6...18.exe

windows7-x64

7

e1f0a2e1c6...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1f0a2e1c617969716c5c109b63058f4_JaffaCakes118

  • Size

    68KB

  • Sample

    240915-hsypla1ekd

  • MD5

    e1f0a2e1c617969716c5c109b63058f4

  • SHA1

    367da8f104e0ae6a2618c1bbb5936ce9b762730e

  • SHA256

    c7fd39ff2b936104766c64c0b0b5c1d233b8630b0df757007a3e74f5b11344f0

  • SHA512

    18d74f50f8bfda50b4d9bc936a03eaab69aacb6123697dfefe3401eeb915fb3bd75d7cc4cb095ce0fa155d67d550eba3af73e297fbac1b70ce6d343546b00a8b

  • SSDEEP

    1536:uKupvclwH04kTEwAzAHPOo0mN1s0EakBQ:4iwRkTElAH2oLs0RkO

Score
7/10
defense_evasiondiscoverypersistence

Malware Config

Targets

    • Target

      e1f0a2e1c617969716c5c109b63058f4_JaffaCakes118

    • Size

      68KB

    • MD5

      e1f0a2e1c617969716c5c109b63058f4

    • SHA1

      367da8f104e0ae6a2618c1bbb5936ce9b762730e

    • SHA256

      c7fd39ff2b936104766c64c0b0b5c1d233b8630b0df757007a3e74f5b11344f0

    • SHA512

      18d74f50f8bfda50b4d9bc936a03eaab69aacb6123697dfefe3401eeb915fb3bd75d7cc4cb095ce0fa155d67d550eba3af73e297fbac1b70ce6d343546b00a8b

    • SSDEEP

      1536:uKupvclwH04kTEwAzAHPOo0mN1s0EakBQ:4iwRkTElAH2oLs0RkO

    Score
    7/10
    defense_evasiondiscoverypersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks