Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

101a815d54...18.exe

windows7-x64

6

101a815d54...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    101a815d542d212a315b3ca36f2ab7e7_JaffaCakes118

  • Size

    125KB

  • Sample

    241003-xbxtaszhpp

  • MD5

    101a815d542d212a315b3ca36f2ab7e7

  • SHA1

    7179f0249039f1706497ef3715483f35924b9398

  • SHA256

    cfb7af75a76f0962c0682e99f9ff00f029a218563bbfde1ab90d095c80c70c31

  • SHA512

    9e9053f8fc5af093338ae95798798217af5eddd888c5297c1fe35add37cab600f659bedac58dca667da569b88003522b3d85ff2304ccaa73cd32148332ecc676

  • SSDEEP

    3072:0ckAxaE6jCSPYqZh4+aPl7bkbIkkUIkbIM:1kmakLqjx

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      101a815d542d212a315b3ca36f2ab7e7_JaffaCakes118

    • Size

      125KB

    • MD5

      101a815d542d212a315b3ca36f2ab7e7

    • SHA1

      7179f0249039f1706497ef3715483f35924b9398

    • SHA256

      cfb7af75a76f0962c0682e99f9ff00f029a218563bbfde1ab90d095c80c70c31

    • SHA512

      9e9053f8fc5af093338ae95798798217af5eddd888c5297c1fe35add37cab600f659bedac58dca667da569b88003522b3d85ff2304ccaa73cd32148332ecc676

    • SSDEEP

      3072:0ckAxaE6jCSPYqZh4+aPl7bkbIkkUIkbIM:1kmakLqjx

    Score
    7/10
    discoverypersistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Checks for any installed AV software in registry

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks