Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

ffaa16615d...18.exe

windows7-x64

7

ffaa16615d...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ffaa16615d5dfd53bb51c2a73e800e2d_JaffaCakes118

  • Size

    195KB

  • Sample

    240930-bnr8pavang

  • MD5

    ffaa16615d5dfd53bb51c2a73e800e2d

  • SHA1

    d3c50387c66f293acb913b6367e057b293086e62

  • SHA256

    3e2cd04bf8da6a657bd5f9b26102da15604f734e8a1991c8832075fca7df9b5d

  • SHA512

    be9f590d5bfdd6d6418848019f57d5a22211238104bf733abb84deddb3c72396a44cf39ed2f3b3d712572bc4de8082047bf366b9f75a7c559e63c13e2ace4a1f

  • SSDEEP

    3072:Qmc+HTB0EyEZ0CqOFjleim0eY9IpNyV3voLBUsp/lj/q2M6pQxZ4N3RjQtCxC2Qx:QmPTBIWwHbU8Ny+BUsp9jCx4Qc3Js

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      ffaa16615d5dfd53bb51c2a73e800e2d_JaffaCakes118

    • Size

      195KB

    • MD5

      ffaa16615d5dfd53bb51c2a73e800e2d

    • SHA1

      d3c50387c66f293acb913b6367e057b293086e62

    • SHA256

      3e2cd04bf8da6a657bd5f9b26102da15604f734e8a1991c8832075fca7df9b5d

    • SHA512

      be9f590d5bfdd6d6418848019f57d5a22211238104bf733abb84deddb3c72396a44cf39ed2f3b3d712572bc4de8082047bf366b9f75a7c559e63c13e2ace4a1f

    • SSDEEP

      3072:Qmc+HTB0EyEZ0CqOFjleim0eY9IpNyV3voLBUsp/lj/q2M6pQxZ4N3RjQtCxC2Qx:QmPTBIWwHbU8Ny+BUsp9jCx4Qc3Js

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks