Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

0ec6d61b12...18.exe

windows7-x64

10

0ec6d61b12...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0ec6d61b12e3ff3ea863439cb4869887_JaffaCakes118

  • Size

    132KB

  • Sample

    241003-kcwleaxelh

  • MD5

    0ec6d61b12e3ff3ea863439cb4869887

  • SHA1

    023200ebdf6c6e78b54ae545f5e4e4c7cc803b62

  • SHA256

    cfeee34235a2945605a1ac5f98f51863e3d7c641294f0b6df5bd70284f670179

  • SHA512

    36e677cd83df4b9e7ccf1bd601645c628cccff309bc282bdd0ec20f37bed95bf6f0496652dbaacb1f04f5513d2cc166b042de059b8f0af2c786e5984c1402fac

  • SSDEEP

    768:h/raHM782f9rvs2Zg5nicskQzTGfxgzh3emu4v/eB4z7VP7LdGSu2HyTAzfMgTA1:h/roM7ZJfUQWgY54v

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      0ec6d61b12e3ff3ea863439cb4869887_JaffaCakes118

    • Size

      132KB

    • MD5

      0ec6d61b12e3ff3ea863439cb4869887

    • SHA1

      023200ebdf6c6e78b54ae545f5e4e4c7cc803b62

    • SHA256

      cfeee34235a2945605a1ac5f98f51863e3d7c641294f0b6df5bd70284f670179

    • SHA512

      36e677cd83df4b9e7ccf1bd601645c628cccff309bc282bdd0ec20f37bed95bf6f0496652dbaacb1f04f5513d2cc166b042de059b8f0af2c786e5984c1402fac

    • SSDEEP

      768:h/raHM782f9rvs2Zg5nicskQzTGfxgzh3emu4v/eB4z7VP7LdGSu2HyTAzfMgTA1:h/roM7ZJfUQWgY54v

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks