Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

04b853415b...18.exe

windows7-x64

10

04b853415b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    04b853415b0069b574f8b5bde95c36e8_JaffaCakes118

  • Size

    72KB

  • Sample

    241001-hezdzawalq

  • MD5

    04b853415b0069b574f8b5bde95c36e8

  • SHA1

    2a29c7d981130d757862e76aa52a432a77b6d8d6

  • SHA256

    d2b6fe7f0aff192e87fb4331102850e666066d88c4953cb84367f9c71eb80420

  • SHA512

    e29eb8d336caadc0efcfe3fd255feb29e4243c7bff19a14fe1b06d44e486b51b0f22ea51ebd92281c79ad2ca849ad817d42d60ab9ec5c7ddb2671a4606355101

  • SSDEEP

    384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2X:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrb

Score
10/10
discoveryevasion

Malware Config

Targets

    • Target

      04b853415b0069b574f8b5bde95c36e8_JaffaCakes118

    • Size

      72KB

    • MD5

      04b853415b0069b574f8b5bde95c36e8

    • SHA1

      2a29c7d981130d757862e76aa52a432a77b6d8d6

    • SHA256

      d2b6fe7f0aff192e87fb4331102850e666066d88c4953cb84367f9c71eb80420

    • SHA512

      e29eb8d336caadc0efcfe3fd255feb29e4243c7bff19a14fe1b06d44e486b51b0f22ea51ebd92281c79ad2ca849ad817d42d60ab9ec5c7ddb2671a4606355101

    • SSDEEP

      384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2X:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrb

    Score
    10/10
    discoveryevasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks