Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

f5d9df99f3...18.exe

windows7-x64

8

f5d9df99f3...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f5d9df99f37de85a1de2d69bc89f5e34_JaffaCakes118

  • Size

    43KB

  • Sample

    240925-m1m1aavcpe

  • MD5

    f5d9df99f37de85a1de2d69bc89f5e34

  • SHA1

    7b3830f068d01e22b632823aedbfad85a98d8439

  • SHA256

    b367931a672519fd8d2c1dd045163d5254e508b30d74c6bd493ca64f0e5b626f

  • SHA512

    42f886a6a6a9bbb0b473480d1bbdc5c9abd5396748400fc8a1e9481af80dd1bce15d9c1ee289b6c63a2bef23c44b14e0173f0829502aba8df92bacfedee9abd7

  • SSDEEP

    768:ygOq9H5A6DIZekJeY5dPDH4uOy7GoCMcMBoWNQL3PZNLv6kE+yxYha5nm:119H5RUfH5dk6L1cMBXuZtsm

Score
8/10
defense_evasiondiscoverypersistence

Malware Config

Targets

    • Target

      f5d9df99f37de85a1de2d69bc89f5e34_JaffaCakes118

    • Size

      43KB

    • MD5

      f5d9df99f37de85a1de2d69bc89f5e34

    • SHA1

      7b3830f068d01e22b632823aedbfad85a98d8439

    • SHA256

      b367931a672519fd8d2c1dd045163d5254e508b30d74c6bd493ca64f0e5b626f

    • SHA512

      42f886a6a6a9bbb0b473480d1bbdc5c9abd5396748400fc8a1e9481af80dd1bce15d9c1ee289b6c63a2bef23c44b14e0173f0829502aba8df92bacfedee9abd7

    • SSDEEP

      768:ygOq9H5A6DIZekJeY5dPDH4uOy7GoCMcMBoWNQL3PZNLv6kE+yxYha5nm:119H5RUfH5dk6L1cMBXuZtsm

    Score
    8/10
    defense_evasiondiscoverypersistence

    • Server Software Component: Terminal Services DLL

      persistence

    • Deletes itself

    • Loads dropped DLL

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks