Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5

f6a0a66f75...18.exe

windows7-x64

f6a0a66f75...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f6a0a66f752d499640b0f837f9cbc2ca_JaffaCakes118

  • Size

    586KB

  • Sample

    240925-xatp9athjb

  • MD5

    f6a0a66f752d499640b0f837f9cbc2ca

  • SHA1

    706183323b5f25e75c84490002222c7fe9f7089a

  • SHA256

    e66a288b01c7d92b7f2ad7ec1069e478ba6baf1dcceca26045cfde1af3372906

  • SHA512

    4a548c271b12b7dd6008d5565762b313169a8e70d024601080a15f013ea1a4cbabdff59acdda05e791fd59feb064c50d92370f6cb50a61c54c2e27af8718540d

  • SSDEEP

    12288:NFrXoPDc6TR74di5m7bZH1thUOO2XzU44V4N63ovb1jGfFbfkjcUKSd:jToPQER7Qom/ZHrhUIz1M4SGEFS

Score
10/10
discoverypersistenceupx

Malware Config

Extracted

Language
hta
Source
URLs
hta.dropper

http://fyreport.com/inst.php?id=skytraf01

Targets

    • Target

      f6a0a66f752d499640b0f837f9cbc2ca_JaffaCakes118

    • Size

      586KB

    • MD5

      f6a0a66f752d499640b0f837f9cbc2ca

    • SHA1

      706183323b5f25e75c84490002222c7fe9f7089a

    • SHA256

      e66a288b01c7d92b7f2ad7ec1069e478ba6baf1dcceca26045cfde1af3372906

    • SHA512

      4a548c271b12b7dd6008d5565762b313169a8e70d024601080a15f013ea1a4cbabdff59acdda05e791fd59feb064c50d92370f6cb50a61c54c2e27af8718540d

    • SSDEEP

      12288:NFrXoPDc6TR74di5m7bZH1thUOO2XzU44V4N63ovb1jGfFbfkjcUKSd:jToPQER7Qom/ZHrhUIz1M4SGEFS

    Score
    10/10
    discoverypersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks