Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

0b49af01e1...18.exe

windows7-x64

7

0b49af01e1...18.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0b49af01e1f10f569c7991803dc4e9cb_JaffaCakes118

  • Size

    351KB

  • Sample

    241002-shs2gasgjq

  • MD5

    0b49af01e1f10f569c7991803dc4e9cb

  • SHA1

    918c236ba677f8f2bd6b9644b9af860534d474f4

  • SHA256

    dca89b7b45e972dff06dfa24d2e3b74b42c3b28398f0e56caa9703f882291818

  • SHA512

    c05e18433a13632fea0e8ffd54549054aaa3002219c0522f544d001b3fec54b0d6c5557e5f4432c61683202f703b8f2e7462f884bb34198d1699de73a4bd061d

  • SSDEEP

    6144:Zs6XtQFiH4SgDfi5lAWAm4WYuQzbq59R18f9n6JD/pE4DjH:Zs6HYpfickYDbq59R181A/pE4DjH

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      0b49af01e1f10f569c7991803dc4e9cb_JaffaCakes118

    • Size

      351KB

    • MD5

      0b49af01e1f10f569c7991803dc4e9cb

    • SHA1

      918c236ba677f8f2bd6b9644b9af860534d474f4

    • SHA256

      dca89b7b45e972dff06dfa24d2e3b74b42c3b28398f0e56caa9703f882291818

    • SHA512

      c05e18433a13632fea0e8ffd54549054aaa3002219c0522f544d001b3fec54b0d6c5557e5f4432c61683202f703b8f2e7462f884bb34198d1699de73a4bd061d

    • SSDEEP

      6144:Zs6XtQFiH4SgDfi5lAWAm4WYuQzbq59R18f9n6JD/pE4DjH:Zs6HYpfickYDbq59R181A/pE4DjH

    Score
    7/10
    discoverypersistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks