Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

0bf7a6a73d...18.exe

windows7-x64

7

0bf7a6a73d...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0bf7a6a73da60f6dd8b196fe5d071c5a_JaffaCakes118

  • Size

    303KB

  • Sample

    241002-w2dbxazgkk

  • MD5

    0bf7a6a73da60f6dd8b196fe5d071c5a

  • SHA1

    28c8ce307ba0319341bf308d83fe1d4510c751f0

  • SHA256

    bfc58960b6c764029b12d6d0516b9bd0cd2edb0dc501027d45c15fb0b26ca4b0

  • SHA512

    143b9ea918e59c3ed9d3e2f2a35e8786796c6d0be3d48ec97b6fcfca004c212af8b577ec3491f66a50b42c484ff17b97b16f22632159ebe572a391849e908c8c

  • SSDEEP

    6144:WY94N2RXeBkvrB44Jz584na9rwCh7X7Eva0STD6d9Yj6ZzR:99O/BkvN4Oz58qa9rwC1L+ap6dmE

Score
7/10
adwarediscoverypersistencestealerupx

Malware Config

Targets

    • Target

      0bf7a6a73da60f6dd8b196fe5d071c5a_JaffaCakes118

    • Size

      303KB

    • MD5

      0bf7a6a73da60f6dd8b196fe5d071c5a

    • SHA1

      28c8ce307ba0319341bf308d83fe1d4510c751f0

    • SHA256

      bfc58960b6c764029b12d6d0516b9bd0cd2edb0dc501027d45c15fb0b26ca4b0

    • SHA512

      143b9ea918e59c3ed9d3e2f2a35e8786796c6d0be3d48ec97b6fcfca004c212af8b577ec3491f66a50b42c484ff17b97b16f22632159ebe572a391849e908c8c

    • SSDEEP

      6144:WY94N2RXeBkvrB44Jz584na9rwCh7X7Eva0STD6d9Yj6ZzR:99O/BkvN4Oz58qa9rwC1L+ap6dmE

    Score
    7/10
    adwarediscoverypersistencestealerupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks