d99ec7fb27a7d33a329db0ceb1259467161de16640f6cbbed93f7df5497a3eb5 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

5

2f4672168d...18.exe

windows7-x64

6

2f4672168d...18.exe

windows10-2004-x64

6

Sharing

General

Target

2f4672168da491d4e01388c131334827_JaffaCakes118
Size

31KB
Sample

241009-l86a6asfnc
MD5

2f4672168da491d4e01388c131334827
SHA1

a757020b9b057033616d469e0a0473cec5489e72
SHA256

d99ec7fb27a7d33a329db0ceb1259467161de16640f6cbbed93f7df5497a3eb5
SHA512

901cbec56f626d9b9e3bcb069a7ed3b25665623ec293fe4de20506c341209115c5f3fd1eda3a7a6b22ad3e8d63da91a45b5c08989bda2695272227e711dee362
SSDEEP

768:UMopdCd8WGhT0IjX74hpun67sTykUTOMW:1qeIjchU6wukUTOj

Score

6^/10

discovery upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

2f4672168da491d4e01388c131334827_JaffaCakes118.exe

Resource

win7-20240903-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

2f4672168da491d4e01388c131334827_JaffaCakes118.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  2f4672168da491d4e01388c131334827_JaffaCakes118
- Size
  
  31KB
- MD5
  
  2f4672168da491d4e01388c131334827
- SHA1
  
  a757020b9b057033616d469e0a0473cec5489e72
- SHA256
  
  d99ec7fb27a7d33a329db0ceb1259467161de16640f6cbbed93f7df5497a3eb5
- SHA512
  
  901cbec56f626d9b9e3bcb069a7ed3b25665623ec293fe4de20506c341209115c5f3fd1eda3a7a6b22ad3e8d63da91a45b5c08989bda2695272227e711dee362
- SSDEEP
  
  768:UMopdCd8WGhT0IjX74hpun67sTykUTOMW:1qeIjchU6wukUTOj
Score

6^/10

upx discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops autorun.inf file
  Malware can abuse Windows Autorun to spread further via attached volumes.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Replication Through Removable Media

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Replication Through Removable Media

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.