Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5

fb7a0477cd...18.exe

windows7-x64

10

fb7a0477cd...18.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb7a0477cdcbe5d1df6504f50d0c10f7_JaffaCakes118

  • Size

    249KB

  • Sample

    240928-erwl3awfjp

  • MD5

    fb7a0477cdcbe5d1df6504f50d0c10f7

  • SHA1

    34cd6ce68588d91f8a800c2713721058e7ca1e58

  • SHA256

    e5b504fc20d8112fb3069d0f96c78736179611e412554a23a831ae1e305d7e4b

  • SHA512

    0d57f8ad78431e3a1dcc2e53d05f7b0cef7a2a60397b538a7eb4e7985854dac643259e321e9616148903c205915fef14d7e2e7d3c9fd236e898a2112ae4e3429

  • SSDEEP

    6144:N+FRX/k0Kt9SPUYCCfqORrjfhnSCo/4rTUXDutCzp1it4J:N+P/kLt9SPUzCDrhnSCiTXS

Score
10/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      fb7a0477cdcbe5d1df6504f50d0c10f7_JaffaCakes118

    • Size

      249KB

    • MD5

      fb7a0477cdcbe5d1df6504f50d0c10f7

    • SHA1

      34cd6ce68588d91f8a800c2713721058e7ca1e58

    • SHA256

      e5b504fc20d8112fb3069d0f96c78736179611e412554a23a831ae1e305d7e4b

    • SHA512

      0d57f8ad78431e3a1dcc2e53d05f7b0cef7a2a60397b538a7eb4e7985854dac643259e321e9616148903c205915fef14d7e2e7d3c9fd236e898a2112ae4e3429

    • SSDEEP

      6144:N+FRX/k0Kt9SPUYCCfqORrjfhnSCo/4rTUXDutCzp1it4J:N+P/kLt9SPUzCDrhnSCiTXS

    Score
    10/10
    discoverypersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks