Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

27eaa7f3bf...18.exe

windows7-x64

7

27eaa7f3bf...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    27eaa7f3bf0d6b77dff6797e3d621041_JaffaCakes118

  • Size

    141KB

  • Sample

    241009-a3bntayfnh

  • MD5

    27eaa7f3bf0d6b77dff6797e3d621041

  • SHA1

    15de7b64166130a7ee2a7a937e629f66f18f0aa5

  • SHA256

    995d47356ca2096dbd2625c155a9d18e3a82d33ab22043d06aa3e1fdf15269e7

  • SHA512

    a0a2ef98bd495cfb4348a43a36d2755cffc68ef5ceff8b0740934b359bc94330fd6f39b73fc15e9e374d87fc0ed90e93b9212b99ad95a06998059dead246f7d1

  • SSDEEP

    3072:e4tWMJJh6fryYP/daqh8iJkZyrV9coUOI+cs3mSxlsW:ecWMJJhqryYP/daqh5JgyrV9ckIts3xp

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      27eaa7f3bf0d6b77dff6797e3d621041_JaffaCakes118

    • Size

      141KB

    • MD5

      27eaa7f3bf0d6b77dff6797e3d621041

    • SHA1

      15de7b64166130a7ee2a7a937e629f66f18f0aa5

    • SHA256

      995d47356ca2096dbd2625c155a9d18e3a82d33ab22043d06aa3e1fdf15269e7

    • SHA512

      a0a2ef98bd495cfb4348a43a36d2755cffc68ef5ceff8b0740934b359bc94330fd6f39b73fc15e9e374d87fc0ed90e93b9212b99ad95a06998059dead246f7d1

    • SSDEEP

      3072:e4tWMJJh6fryYP/daqh8iJkZyrV9coUOI+cs3mSxlsW:ecWMJJhqryYP/daqh5JgyrV9ckIts3xp

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks