Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

ebf16e4d00...18.exe

windows7-x64

10

ebf16e4d00...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ebf16e4d0087fa350660cd4d030b1024_JaffaCakes118

  • Size

    100KB

  • Sample

    240919-w4qp1stbpf

  • MD5

    ebf16e4d0087fa350660cd4d030b1024

  • SHA1

    2f4b09a4481f66fadc018debfd0ecf100544ffd8

  • SHA256

    30846fd674f47afad2a42f44b972fb30ee7ae0310894c1700aa40e1000587c97

  • SHA512

    377b178872b5ee9d6dc883933dec4f3a497631556dc96ff4b7df89c44d0a6418bd91d86ae0bcdeedd82ab1af5a11191d96f01562aa114f02736b5e4c08979507

  • SSDEEP

    1536:jjtGo82NTzwGqMGAc4ohrPXo+73Rez8b0SyKNIjnZrJ:XwGNurPX7CKCnlJ

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      ebf16e4d0087fa350660cd4d030b1024_JaffaCakes118

    • Size

      100KB

    • MD5

      ebf16e4d0087fa350660cd4d030b1024

    • SHA1

      2f4b09a4481f66fadc018debfd0ecf100544ffd8

    • SHA256

      30846fd674f47afad2a42f44b972fb30ee7ae0310894c1700aa40e1000587c97

    • SHA512

      377b178872b5ee9d6dc883933dec4f3a497631556dc96ff4b7df89c44d0a6418bd91d86ae0bcdeedd82ab1af5a11191d96f01562aa114f02736b5e4c08979507

    • SSDEEP

      1536:jjtGo82NTzwGqMGAc4ohrPXo+73Rez8b0SyKNIjnZrJ:XwGNurPX7CKCnlJ

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks