Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

5

fcd5e75a21...18.exe

windows7-x64

6

fcd5e75a21...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fcd5e75a21b6a88fc683c9310034622a_JaffaCakes118

  • Size

    4.7MB

  • Sample

    240928-wgmd3sycln

  • MD5

    fcd5e75a21b6a88fc683c9310034622a

  • SHA1

    87cbcaf5d4bc6544b56a8d205b1322018450ad7e

  • SHA256

    a54860b3482a3e5312a6f7881b02c46501804bebe0a807e6e1a365b24e58cf06

  • SHA512

    f1954575ac77df385e6fc12efb0f04526af437454a1981004138bea883e24e11f737c87d607e41c7b26cc63e6b7ebbf6babc82a74e053c65f8b649f02e5544ed

  • SSDEEP

    98304:YXfkMf4uBFeJ1QleIDHgbAfmQtPUpNCp5DORqMtaUljVUPXnCkyVtFN1M5:+vQuneJ1QLHavQSpNCPD8qMQUlq4tFNK

Score
6/10
discoveryupx

Malware Config

Targets

    • Target

      fcd5e75a21b6a88fc683c9310034622a_JaffaCakes118

    • Size

      4.7MB

    • MD5

      fcd5e75a21b6a88fc683c9310034622a

    • SHA1

      87cbcaf5d4bc6544b56a8d205b1322018450ad7e

    • SHA256

      a54860b3482a3e5312a6f7881b02c46501804bebe0a807e6e1a365b24e58cf06

    • SHA512

      f1954575ac77df385e6fc12efb0f04526af437454a1981004138bea883e24e11f737c87d607e41c7b26cc63e6b7ebbf6babc82a74e053c65f8b649f02e5544ed

    • SSDEEP

      98304:YXfkMf4uBFeJ1QleIDHgbAfmQtPUpNCp5DORqMtaUljVUPXnCkyVtFN1M5:+vQuneJ1QLHavQSpNCPD8qMQUlq4tFNK

    Score
    6/10
    discoveryupx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks