Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7

eac58e6607...18.exe

windows7-x64

8

eac58e6607...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eac58e6607ac2c4e98e9138c073c66ea_JaffaCakes118

  • Size

    26KB

  • Sample

    240919-hdchtawamn

  • MD5

    eac58e6607ac2c4e98e9138c073c66ea

  • SHA1

    e1dfcf81491e03d1591be1efebb14ef10338f99a

  • SHA256

    df1df954a4b33d67b61c62a3a418760c6191c6319f979eecf8f8242e3fcb5c50

  • SHA512

    aea5d1ae1379bc72422653eb591b5dc293df9bf8eb6f8319d6cb476daf5b0b75e0a66bdeb7326e0fccaeeb1ed8156caf0be06cead7356708d86ccd54e93d0863

  • SSDEEP

    384:9lYPafk3R0heHDoQ9O4xLI5v/zdJidx/SvmRFvbe/RODJ44Wn3yLohNXHma:Lk3R4sOv5TdIT/S4De5ODa4W3yLoTm

Score
8/10
discoveryevasionpersistenceupx

Malware Config

Targets

    • Target

      eac58e6607ac2c4e98e9138c073c66ea_JaffaCakes118

    • Size

      26KB

    • MD5

      eac58e6607ac2c4e98e9138c073c66ea

    • SHA1

      e1dfcf81491e03d1591be1efebb14ef10338f99a

    • SHA256

      df1df954a4b33d67b61c62a3a418760c6191c6319f979eecf8f8242e3fcb5c50

    • SHA512

      aea5d1ae1379bc72422653eb591b5dc293df9bf8eb6f8319d6cb476daf5b0b75e0a66bdeb7326e0fccaeeb1ed8156caf0be06cead7356708d86ccd54e93d0863

    • SSDEEP

      384:9lYPafk3R0heHDoQ9O4xLI5v/zdJidx/SvmRFvbe/RODJ44Wn3yLohNXHma:Lk3R4sOv5TdIT/S4De5ODa4W3yLoTm

    Score
    8/10
    discoveryevasionpersistenceupx

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Disables Task Manager via registry modification

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks