Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

ee9900151e...18.exe

windows7-x64

10

ee9900151e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee9900151ec1524dc111799eadd63521_JaffaCakes118

  • Size

    400KB

  • Sample

    240920-2y7n8sshkf

  • MD5

    ee9900151ec1524dc111799eadd63521

  • SHA1

    bc8d5ffdd6cf25bd8cd0aa451a4fc723b76c480e

  • SHA256

    ce67e91fd1429a606c6bb7ed19563a17aad0d5917912c292bd7a3873ab76bfbc

  • SHA512

    148564c8361a7a8b43e401e2b7ca53bb667756948f165fc20831aa607448dc82c63672a7ff4522994a81f83769e8568765ab1aaf829f396417f08f69ff854ecd

  • SSDEEP

    6144:pqOw37xDa17fdzUHKV5CmZR2C0pZibw1jE/i0Q/MT:pqOQ7Na1LdZ5NT2E01ocMT

Score
10/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      ee9900151ec1524dc111799eadd63521_JaffaCakes118

    • Size

      400KB

    • MD5

      ee9900151ec1524dc111799eadd63521

    • SHA1

      bc8d5ffdd6cf25bd8cd0aa451a4fc723b76c480e

    • SHA256

      ce67e91fd1429a606c6bb7ed19563a17aad0d5917912c292bd7a3873ab76bfbc

    • SHA512

      148564c8361a7a8b43e401e2b7ca53bb667756948f165fc20831aa607448dc82c63672a7ff4522994a81f83769e8568765ab1aaf829f396417f08f69ff854ecd

    • SSDEEP

      6144:pqOw37xDa17fdzUHKV5CmZR2C0pZibw1jE/i0Q/MT:pqOQ7Na1LdZ5NT2E01ocMT

    Score
    10/10
    discoverypersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks