Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

01cc10f794...18.exe

windows7-x64

10

01cc10f794...18.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    01cc10f794a3bf364f583a1b7ab5a9c4_JaffaCakes118

  • Size

    58KB

  • Sample

    240930-rred1azekl

  • MD5

    01cc10f794a3bf364f583a1b7ab5a9c4

  • SHA1

    9a30860fb0ef3daa55ef1f49b9f676167819b423

  • SHA256

    b57ef321858a378eacc5a46f39aad236415c5c417e8f51cedb381c5b8e584d9b

  • SHA512

    639277db397c61b6fc39910ffc9ba68f9a133906d5f91b890552bd56e04ad7681369c41d95e5a6d8adb615e9fbc515e8a9b397e810b707463ce187e3e4ec485f

  • SSDEEP

    768:yvFa1w7Q6gkX8jwrQyIGR9fB0sFAxkEXbfzVkCID2akMsO4l5EVIb0ozQac+qfpn:MFaiQ6gO813Mf6kELzVlXaHsFeFMQ2o

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      01cc10f794a3bf364f583a1b7ab5a9c4_JaffaCakes118

    • Size

      58KB

    • MD5

      01cc10f794a3bf364f583a1b7ab5a9c4

    • SHA1

      9a30860fb0ef3daa55ef1f49b9f676167819b423

    • SHA256

      b57ef321858a378eacc5a46f39aad236415c5c417e8f51cedb381c5b8e584d9b

    • SHA512

      639277db397c61b6fc39910ffc9ba68f9a133906d5f91b890552bd56e04ad7681369c41d95e5a6d8adb615e9fbc515e8a9b397e810b707463ce187e3e4ec485f

    • SSDEEP

      768:yvFa1w7Q6gkX8jwrQyIGR9fB0sFAxkEXbfzVkCID2akMsO4l5EVIb0ozQac+qfpn:MFaiQ6gO813Mf6kELzVlXaHsFeFMQ2o

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks