Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

5

0bb6731f5d...18.exe

windows7-x64

7

0bb6731f5d...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0bb6731f5da64a06d1415a4cc85fce93_JaffaCakes118

  • Size

    44KB

  • Sample

    241002-vn9mhsxerk

  • MD5

    0bb6731f5da64a06d1415a4cc85fce93

  • SHA1

    62f1d2bb1af71ca01c960718f2c2a256b30cfbee

  • SHA256

    a22e1bea80dcc2286e732375259da9da76cf534fdb995714e64506340fd8e7d3

  • SHA512

    f75c27de029201ed3e3055b46d63fd775f2e0323f44e5c79b55db55eb58fb1ed4bbe2a91f6b38f51bddc87e6329c8dfafa58ba8d3da8f2a17c19e78dd4687aec

  • SSDEEP

    768:eyX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIo4ZIjM6ycQNetT3bUun9xIy/T:egKcR4mjD9r82RqArNS3gGIA

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      0bb6731f5da64a06d1415a4cc85fce93_JaffaCakes118

    • Size

      44KB

    • MD5

      0bb6731f5da64a06d1415a4cc85fce93

    • SHA1

      62f1d2bb1af71ca01c960718f2c2a256b30cfbee

    • SHA256

      a22e1bea80dcc2286e732375259da9da76cf534fdb995714e64506340fd8e7d3

    • SHA512

      f75c27de029201ed3e3055b46d63fd775f2e0323f44e5c79b55db55eb58fb1ed4bbe2a91f6b38f51bddc87e6329c8dfafa58ba8d3da8f2a17c19e78dd4687aec

    • SSDEEP

      768:eyX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIo4ZIjM6ycQNetT3bUun9xIy/T:egKcR4mjD9r82RqArNS3gGIA

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks