Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

0b01869204...18.exe

windows7-x64

7

0b01869204...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0b0186920413b879c4e32c29190ad774_JaffaCakes118

  • Size

    321KB

  • Sample

    241002-q9nvqazcjl

  • MD5

    0b0186920413b879c4e32c29190ad774

  • SHA1

    f61aa39cfa4deb05984f8db0679cfb43d1b098d5

  • SHA256

    e42bbc2bbc0fcf5412fe2004aa9d42dbc8fbca4abece8ba1dfd8e9ccb798af51

  • SHA512

    e73cd6d62d7f7ba846057de4a9ee862920b7ac1efb9dc1f3665c0fafcceb2df23fa1c2d9464fd6c07b8f7369c7339d90155eb9afa1830acb36861dbee9c541a2

  • SSDEEP

    6144:AT+FQowd7CswMHScIOq1G/PVRnC2CkErfoFWN:zFhw/ycBqwVRC2gcFU

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      0b0186920413b879c4e32c29190ad774_JaffaCakes118

    • Size

      321KB

    • MD5

      0b0186920413b879c4e32c29190ad774

    • SHA1

      f61aa39cfa4deb05984f8db0679cfb43d1b098d5

    • SHA256

      e42bbc2bbc0fcf5412fe2004aa9d42dbc8fbca4abece8ba1dfd8e9ccb798af51

    • SHA512

      e73cd6d62d7f7ba846057de4a9ee862920b7ac1efb9dc1f3665c0fafcceb2df23fa1c2d9464fd6c07b8f7369c7339d90155eb9afa1830acb36861dbee9c541a2

    • SSDEEP

      6144:AT+FQowd7CswMHScIOq1G/PVRnC2CkErfoFWN:zFhw/ycBqwVRC2gcFU

    Score
    7/10
    discoverypersistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks