Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

e259678bca...18.exe

windows7-x64

10

e259678bca...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e259678bcae528f6b223d2cdf6dcb071_JaffaCakes118

  • Size

    41KB

  • Sample

    240915-naq5pa1gkq

  • MD5

    e259678bcae528f6b223d2cdf6dcb071

  • SHA1

    6eafa22e263c1010fec325bc688331666790c06d

  • SHA256

    1dc9a86a25b29d3af115ed70af3a5e8b7745f006b7eaee66fdb52c0a7ccfa5e7

  • SHA512

    c8a08262b419858bfc1b0387c173d0ebd6cc325b96b7eaca0eb921badfd8dd11c4a321a9d363b93a27a51258dd3168dcca93209630a40a9bed88a1cb732f5023

  • SSDEEP

    768:E1XYZk7JeaIOGvskbguLQlCqrD3vTLXnX7eKd5kTBj6J0C:O0k7JGskbv6DLXX9ABeJ0

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      e259678bcae528f6b223d2cdf6dcb071_JaffaCakes118

    • Size

      41KB

    • MD5

      e259678bcae528f6b223d2cdf6dcb071

    • SHA1

      6eafa22e263c1010fec325bc688331666790c06d

    • SHA256

      1dc9a86a25b29d3af115ed70af3a5e8b7745f006b7eaee66fdb52c0a7ccfa5e7

    • SHA512

      c8a08262b419858bfc1b0387c173d0ebd6cc325b96b7eaca0eb921badfd8dd11c4a321a9d363b93a27a51258dd3168dcca93209630a40a9bed88a1cb732f5023

    • SSDEEP

      768:E1XYZk7JeaIOGvskbguLQlCqrD3vTLXnX7eKd5kTBj6J0C:O0k7JGskbv6DLXX9ABeJ0

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Modifies WinLogon

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks