Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

2590914ef4...18.exe

windows7-x64

7

2590914ef4...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2590914ef41537fd271924cf9ed4b0c1_JaffaCakes118

  • Size

    443KB

  • Sample

    241008-z3676axcpl

  • MD5

    2590914ef41537fd271924cf9ed4b0c1

  • SHA1

    41c44c8f2259d2eadf8eb4479725b2bc810a1454

  • SHA256

    2e4fcf42a1f8e49e6620a9d64030cdd97f88bd9aa7fc11767bb8f4d9a174883b

  • SHA512

    26c98ca5cad2def20858d115efc039cec89073c3095957a53fb086ef72d4ad882e450691067f4adf9eb52529f8b68e0b3881e24f6b2f55c36b1aa79bc4337abe

  • SSDEEP

    6144:zbzzv2J/jDlI/qtPW1yzF3ty5w9GhxQqdaV2i/eRo6J5ln6ZdJ71Se2N:uaSQMz8QqdXi/eRo6Th3

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      2590914ef41537fd271924cf9ed4b0c1_JaffaCakes118

    • Size

      443KB

    • MD5

      2590914ef41537fd271924cf9ed4b0c1

    • SHA1

      41c44c8f2259d2eadf8eb4479725b2bc810a1454

    • SHA256

      2e4fcf42a1f8e49e6620a9d64030cdd97f88bd9aa7fc11767bb8f4d9a174883b

    • SHA512

      26c98ca5cad2def20858d115efc039cec89073c3095957a53fb086ef72d4ad882e450691067f4adf9eb52529f8b68e0b3881e24f6b2f55c36b1aa79bc4337abe

    • SSDEEP

      6144:zbzzv2J/jDlI/qtPW1yzF3ty5w9GhxQqdaV2i/eRo6J5ln6ZdJ71Se2N:uaSQMz8QqdXi/eRo6Th3

    Score
    7/10
    discoverypersistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks