Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

001ca21a4e...18.exe

windows7-x64

10

001ca21a4e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    001ca21a4e04af4147c39c578a75907f_JaffaCakes118

  • Size

    72KB

  • Sample

    240930-h1abzasapj

  • MD5

    001ca21a4e04af4147c39c578a75907f

  • SHA1

    2c479c1be6fe0eb25d123d749267aeb93bd0d3d6

  • SHA256

    6b3209cb950365a61b6a541db61ce5d9438d68dd8beb0e75d3c54121334a4cd0

  • SHA512

    ee9dbb5a1725a1d245d032fea6e40d44547c8a8da0a9ca88c7292b240e1bdd681e9391db2d81e4502502bb3ab1aa76ae3b4a6cf05acff6ffae24c9cba40490bf

  • SSDEEP

    384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2C:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrP2

Score
10/10
discoveryevasion

Malware Config

Targets

    • Target

      001ca21a4e04af4147c39c578a75907f_JaffaCakes118

    • Size

      72KB

    • MD5

      001ca21a4e04af4147c39c578a75907f

    • SHA1

      2c479c1be6fe0eb25d123d749267aeb93bd0d3d6

    • SHA256

      6b3209cb950365a61b6a541db61ce5d9438d68dd8beb0e75d3c54121334a4cd0

    • SHA512

      ee9dbb5a1725a1d245d032fea6e40d44547c8a8da0a9ca88c7292b240e1bdd681e9391db2d81e4502502bb3ab1aa76ae3b4a6cf05acff6ffae24c9cba40490bf

    • SSDEEP

      384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2C:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrP2

    Score
    10/10
    discoveryevasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks