Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

03ba0d5523...18.exe

windows7-x64

7

03ba0d5523...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    03ba0d5523356aa0fd71fa7968f379b8_JaffaCakes118

  • Size

    351KB

  • Sample

    241001-ah1r7swakh

  • MD5

    03ba0d5523356aa0fd71fa7968f379b8

  • SHA1

    da21a08cfdad488dd5efe50fc5d6968f177cb1ff

  • SHA256

    60d944fc9d35d169fd198227eb7e9798433f4fbdd0fd6fe1a5ab19d5aa5951c7

  • SHA512

    0b88231bb2b51008ceed877234bf299ef9d9e44544eb96650ea729e62311a7250751dbb5af62d99e149bd8edd305aef0d64fef0e108c068400129fe2cca514d2

  • SSDEEP

    6144:78lhUbjntPDo/OQlpKz8O6KEO+MTKbJ4RQjjJxEI0Xh7PblyzY:Awt7oPaz8Vtxy4jFQ7jlys

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      03ba0d5523356aa0fd71fa7968f379b8_JaffaCakes118

    • Size

      351KB

    • MD5

      03ba0d5523356aa0fd71fa7968f379b8

    • SHA1

      da21a08cfdad488dd5efe50fc5d6968f177cb1ff

    • SHA256

      60d944fc9d35d169fd198227eb7e9798433f4fbdd0fd6fe1a5ab19d5aa5951c7

    • SHA512

      0b88231bb2b51008ceed877234bf299ef9d9e44544eb96650ea729e62311a7250751dbb5af62d99e149bd8edd305aef0d64fef0e108c068400129fe2cca514d2

    • SSDEEP

      6144:78lhUbjntPDo/OQlpKz8O6KEO+MTKbJ4RQjjJxEI0Xh7PblyzY:Awt7oPaz8Vtxy4jFQ7jlys

    Score
    7/10
    discoverypersistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks