Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

fac01b5a9b...18.exe

windows7-x64

10

fac01b5a9b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fac01b5a9b25e7564a8c112a6eab9f5b_JaffaCakes118

  • Size

    128KB

  • Sample

    240927-tz3snstfph

  • MD5

    fac01b5a9b25e7564a8c112a6eab9f5b

  • SHA1

    cfd5593ea3b6189d406ad6e58b9abefd84c26d15

  • SHA256

    d70d0e47695d1c95ff80d74984f60afe92da2a08e250424f927019ef4f059321

  • SHA512

    8910fb1194cc359cc8b0291fcfe465841c16dd093ed8079c85b140f1867a61b0d6f1bc89b7c3e35400063431db86063d0c1a10153a1d9ab2440fd0094ddaeb16

  • SSDEEP

    3072:npIJovvXFwRBW1cQoj9MYuPCNtrKttJTVUa37P5VrsdZM:8u/d2QRYj6TVU4P5qk

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      fac01b5a9b25e7564a8c112a6eab9f5b_JaffaCakes118

    • Size

      128KB

    • MD5

      fac01b5a9b25e7564a8c112a6eab9f5b

    • SHA1

      cfd5593ea3b6189d406ad6e58b9abefd84c26d15

    • SHA256

      d70d0e47695d1c95ff80d74984f60afe92da2a08e250424f927019ef4f059321

    • SHA512

      8910fb1194cc359cc8b0291fcfe465841c16dd093ed8079c85b140f1867a61b0d6f1bc89b7c3e35400063431db86063d0c1a10153a1d9ab2440fd0094ddaeb16

    • SSDEEP

      3072:npIJovvXFwRBW1cQoj9MYuPCNtrKttJTVUa37P5VrsdZM:8u/d2QRYj6TVU4P5qk

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks