Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

133c7131ee...18.exe

windows7-x64

10

133c7131ee...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    133c7131ee5f9c9194e41b7677605ed7_JaffaCakes118

  • Size

    440KB

  • Sample

    241004-nyc8qswfng

  • MD5

    133c7131ee5f9c9194e41b7677605ed7

  • SHA1

    4541902686d805ef7202a477db1ddd52e6d7be56

  • SHA256

    76e6d2f667107e48a4e7757a04acfe6437bac1a25035ccd3f091be730bad2205

  • SHA512

    8f5ff1b71b210e1bc381890dc66f12a07f3632e68ed667982a58ff1f47f06d364a03ccccbf7ee75b94e327b2eee392e90b58729134ab2691da3507e36f273005

  • SSDEEP

    6144:4wW0jqFk7qFoQudlhiP5+6yCtfGiIyZFGRY2:4fz2QudeYrCFwZ

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      133c7131ee5f9c9194e41b7677605ed7_JaffaCakes118

    • Size

      440KB

    • MD5

      133c7131ee5f9c9194e41b7677605ed7

    • SHA1

      4541902686d805ef7202a477db1ddd52e6d7be56

    • SHA256

      76e6d2f667107e48a4e7757a04acfe6437bac1a25035ccd3f091be730bad2205

    • SHA512

      8f5ff1b71b210e1bc381890dc66f12a07f3632e68ed667982a58ff1f47f06d364a03ccccbf7ee75b94e327b2eee392e90b58729134ab2691da3507e36f273005

    • SSDEEP

      6144:4wW0jqFk7qFoQudlhiP5+6yCtfGiIyZFGRY2:4fz2QudeYrCFwZ

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks