Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

10ec469be4...18.exe

windows7-x64

10

10ec469be4...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    10ec469be4bca5cd53945c0ee917012b_JaffaCakes118

  • Size

    220KB

  • Sample

    241003-3j7alawerg

  • MD5

    10ec469be4bca5cd53945c0ee917012b

  • SHA1

    dd60ede9ab7d6c3461e4874b8519092036d426f9

  • SHA256

    0c950f820db77604c3c2d2ace04a8ebce55dec73112bd680227e6c2acfc1e680

  • SHA512

    a3f75e53398bccf4934df9ca97575c94a9482e9e7fce51179b48deefb83fab40c4360923d480efb71f20070dec9a831cdff1a1df1e581aa617555bcc8c1c83ec

  • SSDEEP

    6144:aUA0uhI22QqI6YDSQICvORT8r4EhI0RX7W4h9:aUA0G955vOh8rPhd44T

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      10ec469be4bca5cd53945c0ee917012b_JaffaCakes118

    • Size

      220KB

    • MD5

      10ec469be4bca5cd53945c0ee917012b

    • SHA1

      dd60ede9ab7d6c3461e4874b8519092036d426f9

    • SHA256

      0c950f820db77604c3c2d2ace04a8ebce55dec73112bd680227e6c2acfc1e680

    • SHA512

      a3f75e53398bccf4934df9ca97575c94a9482e9e7fce51179b48deefb83fab40c4360923d480efb71f20070dec9a831cdff1a1df1e581aa617555bcc8c1c83ec

    • SSDEEP

      6144:aUA0uhI22QqI6YDSQICvORT8r4EhI0RX7W4h9:aUA0G955vOh8rPhd44T

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks