Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

36f6dcbd7d...18.exe

windows7-x64

10

36f6dcbd7d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    36f6dcbd7d23a4445d56e5afe4b7455a_JaffaCakes118

  • Size

    200KB

  • Sample

    241011-1pmr2awapc

  • MD5

    36f6dcbd7d23a4445d56e5afe4b7455a

  • SHA1

    0b91d9f3689dcbee9a8d8b98d80adaf7a040dad5

  • SHA256

    f361e96dbf60b2c6b4a3e662220dd1217eb5b2c83449d613fbf8a94b30139cf8

  • SHA512

    4b0991a3e63291583e9cc6319026d5b80ab303578a216bc686e01d1a97a2a9fc666523250cae3e5478baffe2c27f6416b0432ede21a12960eb01dc3f0b8b1374

  • SSDEEP

    3072:iCETo/0YxN60tQ9nLHbB9WPliBs2HWWEakGJm9BsF:iCJy4QxL7B9WPli+yWWEaziC

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      36f6dcbd7d23a4445d56e5afe4b7455a_JaffaCakes118

    • Size

      200KB

    • MD5

      36f6dcbd7d23a4445d56e5afe4b7455a

    • SHA1

      0b91d9f3689dcbee9a8d8b98d80adaf7a040dad5

    • SHA256

      f361e96dbf60b2c6b4a3e662220dd1217eb5b2c83449d613fbf8a94b30139cf8

    • SHA512

      4b0991a3e63291583e9cc6319026d5b80ab303578a216bc686e01d1a97a2a9fc666523250cae3e5478baffe2c27f6416b0432ede21a12960eb01dc3f0b8b1374

    • SSDEEP

      3072:iCETo/0YxN60tQ9nLHbB9WPliBs2HWWEakGJm9BsF:iCJy4QxL7B9WPli+yWWEaziC

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks