Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

0ed664a2d3...18.exe

windows7-x64

7

0ed664a2d3...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0ed664a2d35eaa5269a4b3d260296350_JaffaCakes118

  • Size

    164KB

  • Sample

    241003-kqhlpsyand

  • MD5

    0ed664a2d35eaa5269a4b3d260296350

  • SHA1

    a271696502fa46b9ed8708760bb8daea872d4d1e

  • SHA256

    8f193d29d6cf3c90b84f85679722f57d625a1f01cd0af233e8612fb0dc5d79f9

  • SHA512

    d8cee1fc886ca51105c773aa763f33a6566ff0af3006f5b8919bb74648674edcaee70ed68145ebff7e3d1d6a1eb4e27010f886a82cb153778f2537e40f39763b

  • SSDEEP

    3072:R+qZQOhWL8RYiZ6xUS6n9lBFO1SSAhKGnAlRLUp/fDd2KT9Fk7hKPDFtd2Wi:tQOgLoYiZ6xUSO9lG1SSA63LU72g7o0M

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      0ed664a2d35eaa5269a4b3d260296350_JaffaCakes118

    • Size

      164KB

    • MD5

      0ed664a2d35eaa5269a4b3d260296350

    • SHA1

      a271696502fa46b9ed8708760bb8daea872d4d1e

    • SHA256

      8f193d29d6cf3c90b84f85679722f57d625a1f01cd0af233e8612fb0dc5d79f9

    • SHA512

      d8cee1fc886ca51105c773aa763f33a6566ff0af3006f5b8919bb74648674edcaee70ed68145ebff7e3d1d6a1eb4e27010f886a82cb153778f2537e40f39763b

    • SSDEEP

      3072:R+qZQOhWL8RYiZ6xUS6n9lBFO1SSAhKGnAlRLUp/fDd2KT9Fk7hKPDFtd2Wi:tQOgLoYiZ6xUSO9lG1SSA63LU72g7o0M

    Score
    7/10
    discoverypersistenceupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks