Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

27fcf2b5ce...18.exe

windows7-x64

7

27fcf2b5ce...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    27fcf2b5cea97e7f0b46efc56c4e51d3_JaffaCakes118

  • Size

    132KB

  • Sample

    241009-a63xgavgkl

  • MD5

    27fcf2b5cea97e7f0b46efc56c4e51d3

  • SHA1

    3ed676010997f7b0784c3969a5e625ab8460fecc

  • SHA256

    e60164d938a58fb1cb736cd395dfa9c7db0126d4f3c326c48fe47372c9151f41

  • SHA512

    ba81363c7db6a5e84745702c7cb11d2273aab352110e6a09c12ffa102b27f0f80e2170881cdc869e7c7d7d132999e540c98332317205e1edbdeed755849f6660

  • SSDEEP

    1536:5TvlubSHe/jHLsh6LctKWH0gEtWTE/rli5Z1nWvjI4TWRtss+cfWAY+/Vb2XmzfH:5cbFvLctKWAW8AB8baRts4WNg2Xmav

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      27fcf2b5cea97e7f0b46efc56c4e51d3_JaffaCakes118

    • Size

      132KB

    • MD5

      27fcf2b5cea97e7f0b46efc56c4e51d3

    • SHA1

      3ed676010997f7b0784c3969a5e625ab8460fecc

    • SHA256

      e60164d938a58fb1cb736cd395dfa9c7db0126d4f3c326c48fe47372c9151f41

    • SHA512

      ba81363c7db6a5e84745702c7cb11d2273aab352110e6a09c12ffa102b27f0f80e2170881cdc869e7c7d7d132999e540c98332317205e1edbdeed755849f6660

    • SSDEEP

      1536:5TvlubSHe/jHLsh6LctKWH0gEtWTE/rli5Z1nWvjI4TWRtss+cfWAY+/Vb2XmzfH:5cbFvLctKWAW8AB8baRts4WNg2Xmav

    Score
    7/10
    discoverypersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks