Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5

2652cd5f3e...18.exe

windows7-x64

10

2652cd5f3e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2652cd5f3edab5d61bc34fa9ad658acf_JaffaCakes118

  • Size

    298KB

  • Sample

    241008-19933axbmg

  • MD5

    2652cd5f3edab5d61bc34fa9ad658acf

  • SHA1

    4543624deef5aac6eee669e3edab0da3c4512864

  • SHA256

    327fa82b170d324b1e97e850729cc5ae6ad59e9b1c9f0b12c7c811f9e03f84d2

  • SHA512

    4ce95edbe0797eeae868cc50481cb640f0c0dcdaaa1fd677c325ed17558772bc6466f1fad1cbc8b7d202679fd373784dfaab14a79c439edf0b7ff7cbdb3c3fb7

  • SSDEEP

    6144:EuIlWqB+ihabs7Ch9KwyF5LeLodp2D1Mmakda0qLqIYJ:v6Wq4aaE6KwyF5L0Y2D1PqLk

Score
10/10
discoveryevasionupx

Malware Config

Targets

    • Target

      2652cd5f3edab5d61bc34fa9ad658acf_JaffaCakes118

    • Size

      298KB

    • MD5

      2652cd5f3edab5d61bc34fa9ad658acf

    • SHA1

      4543624deef5aac6eee669e3edab0da3c4512864

    • SHA256

      327fa82b170d324b1e97e850729cc5ae6ad59e9b1c9f0b12c7c811f9e03f84d2

    • SHA512

      4ce95edbe0797eeae868cc50481cb640f0c0dcdaaa1fd677c325ed17558772bc6466f1fad1cbc8b7d202679fd373784dfaab14a79c439edf0b7ff7cbdb3c3fb7

    • SSDEEP

      6144:EuIlWqB+ihabs7Ch9KwyF5LeLodp2D1Mmakda0qLqIYJ:v6Wq4aaE6KwyF5L0Y2D1PqLk

    Score
    10/10
    discoveryevasionupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Executes dropped EXE

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks