Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

fffba43aa0...18.exe

windows7-x64

1

fffba43aa0...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fffba43aa01e74b7a9728fb3b6569286_JaffaCakes118

  • Size

    112KB

  • Sample

    240930-e9z27staqd

  • MD5

    fffba43aa01e74b7a9728fb3b6569286

  • SHA1

    33bad9771371c1b32f5bc5c3e61dfa698700dded

  • SHA256

    aeabcc4d23610f86474108cf7fe198e168e20e922a9921012b233adf1703db30

  • SHA512

    3c920edecdb843787669c7b0d6a6414dcd44777250b72e8d331267482657b512e2ad07b69754f00d3125d28c81bb9d1b75caf389dbe94fe3dd46c12b560878a6

  • SSDEEP

    3072:9LE3511sotrKLMuv2zyIMwmeVaH73uPes:9LEKojyIPB23uP5

Score
8/10
defense_evasiondiscoveryupx

Malware Config

Targets

    • Target

      fffba43aa01e74b7a9728fb3b6569286_JaffaCakes118

    • Size

      112KB

    • MD5

      fffba43aa01e74b7a9728fb3b6569286

    • SHA1

      33bad9771371c1b32f5bc5c3e61dfa698700dded

    • SHA256

      aeabcc4d23610f86474108cf7fe198e168e20e922a9921012b233adf1703db30

    • SHA512

      3c920edecdb843787669c7b0d6a6414dcd44777250b72e8d331267482657b512e2ad07b69754f00d3125d28c81bb9d1b75caf389dbe94fe3dd46c12b560878a6

    • SSDEEP

      3072:9LE3511sotrKLMuv2zyIMwmeVaH73uPes:9LEKojyIPB23uP5

    Score
    8/10
    defense_evasiondiscoveryupx

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks