Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

00f623bfb3...18.xls

windows7-x64

10

00f623bfb3...18.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    00f623bfb36a253403669fc4dec5f791_JaffaCakes118

  • Size

    98KB

  • Sample

    240930-m2c7ga1emp

  • MD5

    00f623bfb36a253403669fc4dec5f791

  • SHA1

    67fd817afb56cf19571f688ebf76143cdded1c3d

  • SHA256

    b94df8bbdd72e9b935b14dd2de7746179ecf2864fd3f6ba8c51888e55d41cece

  • SHA512

    5b505acbca9594a5b6f01cce77a4b004faeddc679c7c9712894bd74232f6a5351c3ebe2e0f89011e5bf1728d28b819f6c3922850b24bc2d0e0a7fa1a8ba779c7

  • SSDEEP

    1536:sxxxxENLxrgxFtVwM8jIT+M0mTsbaP6hjSszg/jAyOWVbrzQ7ITkbA2syfshtcJt:eVaWVbrzQ7ITkZXimJtXw1d

Score
10/10
defense_evasiondiscovery

Malware Config

Targets

    • Target

      00f623bfb36a253403669fc4dec5f791_JaffaCakes118

    • Size

      98KB

    • MD5

      00f623bfb36a253403669fc4dec5f791

    • SHA1

      67fd817afb56cf19571f688ebf76143cdded1c3d

    • SHA256

      b94df8bbdd72e9b935b14dd2de7746179ecf2864fd3f6ba8c51888e55d41cece

    • SHA512

      5b505acbca9594a5b6f01cce77a4b004faeddc679c7c9712894bd74232f6a5351c3ebe2e0f89011e5bf1728d28b819f6c3922850b24bc2d0e0a7fa1a8ba779c7

    • SSDEEP

      1536:sxxxxENLxrgxFtVwM8jIT+M0mTsbaP6hjSszg/jAyOWVbrzQ7ITkbA2syfshtcJt:eVaWVbrzQ7ITkZXimJtXw1d

    Score
    10/10
    defense_evasiondiscovery

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks