Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

2d6afe81f2...18.exe

windows7-x64

7

2d6afe81f2...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2d6afe81f28a7eb30cf5bb7b78a43c9a_JaffaCakes118

  • Size

    165KB

  • Sample

    241009-jkfz9azalg

  • MD5

    2d6afe81f28a7eb30cf5bb7b78a43c9a

  • SHA1

    24ce3f0936b7d8465f3fbb91cc82f7a00d2de9f1

  • SHA256

    ae483e167aa6b280ce4565367552a4215eaae124c3aacf6e1f1dfefc8fcb0962

  • SHA512

    9fde67a298abdfc5b7bdf5d7afada2943cb943324a49231fd8eb902f440e2b6b87747c3d9e7cc5dc695b8df5b94159bb35c5671761d3cfdcce037155cb3b715b

  • SSDEEP

    3072:X4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez40:IiI/PlY37ZLF4Ca6WABqBOvs0

Score
7/10
discovery

Malware Config

Targets

    • Target

      2d6afe81f28a7eb30cf5bb7b78a43c9a_JaffaCakes118

    • Size

      165KB

    • MD5

      2d6afe81f28a7eb30cf5bb7b78a43c9a

    • SHA1

      24ce3f0936b7d8465f3fbb91cc82f7a00d2de9f1

    • SHA256

      ae483e167aa6b280ce4565367552a4215eaae124c3aacf6e1f1dfefc8fcb0962

    • SHA512

      9fde67a298abdfc5b7bdf5d7afada2943cb943324a49231fd8eb902f440e2b6b87747c3d9e7cc5dc695b8df5b94159bb35c5671761d3cfdcce037155cb3b715b

    • SSDEEP

      3072:X4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez40:IiI/PlY37ZLF4Ca6WABqBOvs0

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks