Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5

113de567b6...18.exe

windows7-x64

10

113de567b6...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    113de567b602ba220e0b39a41cd6e822_JaffaCakes118

  • Size

    37KB

  • Sample

    241004-bpr93swgpl

  • MD5

    113de567b602ba220e0b39a41cd6e822

  • SHA1

    0c04c9114bce6ece5ff0d024d07428a7180d11e3

  • SHA256

    704a0149a7ff05d10390fffe02a658c55b7820d5a8c81142e9d2565b71b91b4d

  • SHA512

    555e854a707bac9d8352d047b333eb2cad1be8854fc3b57e80a335ac01ae21dc80f143d2b008e428881bffda6b4653a043da4655ad467f41f4c939e1c2fbe2fb

  • SSDEEP

    768:vd2nri/EW9z07uyJt99Fc54hHm6Xl+gW7odjLyfR/dnbcuyD7U:vd0rUNv4FS4hG6VBWFdnouy8

Score
10/10
discoveryevasionexecutionpersistenceupx

Malware Config

Targets

    • Target

      113de567b602ba220e0b39a41cd6e822_JaffaCakes118

    • Size

      37KB

    • MD5

      113de567b602ba220e0b39a41cd6e822

    • SHA1

      0c04c9114bce6ece5ff0d024d07428a7180d11e3

    • SHA256

      704a0149a7ff05d10390fffe02a658c55b7820d5a8c81142e9d2565b71b91b4d

    • SHA512

      555e854a707bac9d8352d047b333eb2cad1be8854fc3b57e80a335ac01ae21dc80f143d2b008e428881bffda6b4653a043da4655ad467f41f4c939e1c2fbe2fb

    • SSDEEP

      768:vd2nri/EW9z07uyJt99Fc54hHm6Xl+gW7odjLyfR/dnbcuyD7U:vd0rUNv4FS4hG6VBWFdnouy8

    Score
    10/10
    discoveryevasionexecutionpersistenceupx

    • Disables service(s)

      evasionexecution

    • Adds policy Run key to start application

      persistence

    • Drops file in Drivers directory

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks