Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7

eb18c10dae...18.exe

windows7-x64

8

eb18c10dae...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eb18c10daec2052a035420c3866ca62f_JaffaCakes118

  • Size

    318KB

  • Sample

    240919-l2awnstbqk

  • MD5

    eb18c10daec2052a035420c3866ca62f

  • SHA1

    4b3cee088f397e4d9f774c5c4a4f3c81d1a221d8

  • SHA256

    dfc157b611233ffb1037d4af638866e89f1d5504b10f86827de79a42cd4fa1ae

  • SHA512

    bf4202edc0f28ba4fe52e741aea6e6e96f2240e39a74d097ff9df349a37113e2b52b51d1d0eb463a413442b78086651c3f67d9450f2983223f2712200246c1a5

  • SSDEEP

    6144:I1zSIqrkISRfXfpY+0yFdADAc74eJpTWCy2vd/BuiRoG:/4ISRPfu+TmZ77Rku1Buyo

Score
8/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      eb18c10daec2052a035420c3866ca62f_JaffaCakes118

    • Size

      318KB

    • MD5

      eb18c10daec2052a035420c3866ca62f

    • SHA1

      4b3cee088f397e4d9f774c5c4a4f3c81d1a221d8

    • SHA256

      dfc157b611233ffb1037d4af638866e89f1d5504b10f86827de79a42cd4fa1ae

    • SHA512

      bf4202edc0f28ba4fe52e741aea6e6e96f2240e39a74d097ff9df349a37113e2b52b51d1d0eb463a413442b78086651c3f67d9450f2983223f2712200246c1a5

    • SSDEEP

      6144:I1zSIqrkISRfXfpY+0yFdADAc74eJpTWCy2vd/BuiRoG:/4ISRPfu+TmZ77Rku1Buyo

    Score
    8/10
    discoverypersistenceupx

    • Server Software Component: Terminal Services DLL

      persistence

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks