Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

5

2e734811b8...18.exe

windows7-x64

8

2e734811b8...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2e734811b8fd40255183a8068c937011_JaffaCakes118

  • Size

    348KB

  • Sample

    241009-k38nnaselk

  • MD5

    2e734811b8fd40255183a8068c937011

  • SHA1

    96701e3f2fa7712aead95d41251a0787116f2ea1

  • SHA256

    d4f2a917898747b2925721cacbdd09d4ea29dce9fd6380d8e2f8c1904197080a

  • SHA512

    0b3cbd4a8fd82bbfe9f8fb4ebdc3392772acbfc84f405ebd42d3275fb2e081aaacb42da0c117207a9143ebfef2f4023704061b19e3b17c3072235a6d3f03b3d2

  • SSDEEP

    3072:eeqSbnq+h4RQw9SJH/qxSXNXy0jJz3wvg4mnedvYCq8rPLIzJND+LF6M0jk43p:eeqSu+hcKqxSFUvgdedvdq+MzDAUY43

Score
8/10
adwarebootkitdiscoverypersistencestealerupx

Malware Config

Targets

    • Target

      2e734811b8fd40255183a8068c937011_JaffaCakes118

    • Size

      348KB

    • MD5

      2e734811b8fd40255183a8068c937011

    • SHA1

      96701e3f2fa7712aead95d41251a0787116f2ea1

    • SHA256

      d4f2a917898747b2925721cacbdd09d4ea29dce9fd6380d8e2f8c1904197080a

    • SHA512

      0b3cbd4a8fd82bbfe9f8fb4ebdc3392772acbfc84f405ebd42d3275fb2e081aaacb42da0c117207a9143ebfef2f4023704061b19e3b17c3072235a6d3f03b3d2

    • SSDEEP

      3072:eeqSbnq+h4RQw9SJH/qxSXNXy0jJz3wvg4mnedvYCq8rPLIzJND+LF6M0jk43p:eeqSu+hcKqxSFUvgdedvdq+MzDAUY43

    Score
    8/10
    adwarebootkitdiscoverypersistencestealerupx

    • Blocklisted process makes network request

    • Deletes itself

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks