Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

5

2c029feed9...18.exe

windows7-x64

7

2c029feed9...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c029feed9d90387c3373163f81e21d2_JaffaCakes118

  • Size

    300KB

  • Sample

    241009-gk3sxayhmb

  • MD5

    2c029feed9d90387c3373163f81e21d2

  • SHA1

    a433e3d528e9cd77121435e30cf8b19d7e467c3e

  • SHA256

    0256e9642f1ecc624eb007e8f40bb03413812f66c4d0a73ea75d1a1405efebba

  • SHA512

    c75671dbbc2f9ced0ec4fdf9f994fc422d3618f2f486bfe5fb3f7d4111cd4b1f17db7db1865c3de38f3403dcbd989d2bacea23a3a5f610ad7c09a57adfabe38a

  • SSDEEP

    6144:/zmGM4OwKXZb58ftTMQaYS78qsA55j4RJ5WW2VCacIT1u:/6XDwO1ET5fqL558MW2PnTo

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      2c029feed9d90387c3373163f81e21d2_JaffaCakes118

    • Size

      300KB

    • MD5

      2c029feed9d90387c3373163f81e21d2

    • SHA1

      a433e3d528e9cd77121435e30cf8b19d7e467c3e

    • SHA256

      0256e9642f1ecc624eb007e8f40bb03413812f66c4d0a73ea75d1a1405efebba

    • SHA512

      c75671dbbc2f9ced0ec4fdf9f994fc422d3618f2f486bfe5fb3f7d4111cd4b1f17db7db1865c3de38f3403dcbd989d2bacea23a3a5f610ad7c09a57adfabe38a

    • SSDEEP

      6144:/zmGM4OwKXZb58ftTMQaYS78qsA55j4RJ5WW2VCacIT1u:/6XDwO1ET5fqL558MW2PnTo

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks