Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

0bfbc9eb91...18.exe

windows7-x64

8

0bfbc9eb91...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0bfbc9eb9115755eaa40d0c21d107244_JaffaCakes118

  • Size

    57KB

  • Sample

    241002-w5nl2stgnf

  • MD5

    0bfbc9eb9115755eaa40d0c21d107244

  • SHA1

    38e6b0a27763cb5c46164660f10f6df1e4801e9e

  • SHA256

    0a04f4841fa1ac63af0fd7e72353faa4b09ded3577510255dea572a357517de9

  • SHA512

    8e6fe5256520370b99286198ac96c5fac20564a421458aecb5896d039db00da72b57dddc55e0f2cdd8bc7a9397d5e4f8b184b352f9652fbc8dfb0bc79c13ff1b

  • SSDEEP

    768:7Qyy1uehE54M6mDVwihlHgdcHk7NzziqBj1+4fbCCXVz8iiom+ZfzNGwkty6+/P:MysuehEmm1rYyqCgat+dVktyz/P

Score
8/10
aspackv2discoverypersistence

Malware Config

Targets

    • Target

      0bfbc9eb9115755eaa40d0c21d107244_JaffaCakes118

    • Size

      57KB

    • MD5

      0bfbc9eb9115755eaa40d0c21d107244

    • SHA1

      38e6b0a27763cb5c46164660f10f6df1e4801e9e

    • SHA256

      0a04f4841fa1ac63af0fd7e72353faa4b09ded3577510255dea572a357517de9

    • SHA512

      8e6fe5256520370b99286198ac96c5fac20564a421458aecb5896d039db00da72b57dddc55e0f2cdd8bc7a9397d5e4f8b184b352f9652fbc8dfb0bc79c13ff1b

    • SSDEEP

      768:7Qyy1uehE54M6mDVwihlHgdcHk7NzziqBj1+4fbCCXVz8iiom+ZfzNGwkty6+/P:MysuehEmm1rYyqCgat+dVktyz/P

    Score
    8/10
    aspackv2discoverypersistence

    • Server Software Component: Terminal Services DLL

      persistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks