Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2fd4b0ca4c...18.exe

windows7-x64

7

2fd4b0ca4c...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2fd4b0ca4c98b737c59da79e1a59f4d0_JaffaCakes118

  • Size

    3.8MB

  • Sample

    241009-mys4hswhjg

  • MD5

    2fd4b0ca4c98b737c59da79e1a59f4d0

  • SHA1

    5eff241c9499924963e6e8034e4a86946991ba85

  • SHA256

    c54f41b90d6cbfa8a8590423642daad2d9804ec8d8cf03a27e2ef4cd1c8b7fbe

  • SHA512

    d210736b5e7ad586154651d252d0c0b871073bdeab683ffa618a39db73d9f58e7de1aa8da67457c2acdfce8d99e361ca3e1dd9309da8319f27c5e576446eae0f

  • SSDEEP

    98304:/SjSLLHz89pCdxkeQv+LT7trNfnxpApzenk7O:/SFIG+ZhZpA9hq

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      2fd4b0ca4c98b737c59da79e1a59f4d0_JaffaCakes118

    • Size

      3.8MB

    • MD5

      2fd4b0ca4c98b737c59da79e1a59f4d0

    • SHA1

      5eff241c9499924963e6e8034e4a86946991ba85

    • SHA256

      c54f41b90d6cbfa8a8590423642daad2d9804ec8d8cf03a27e2ef4cd1c8b7fbe

    • SHA512

      d210736b5e7ad586154651d252d0c0b871073bdeab683ffa618a39db73d9f58e7de1aa8da67457c2acdfce8d99e361ca3e1dd9309da8319f27c5e576446eae0f

    • SSDEEP

      98304:/SjSLLHz89pCdxkeQv+LT7trNfnxpApzenk7O:/SFIG+ZhZpA9hq

    Score
    7/10
    discoverypersistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks