Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

3d3e00fcc2...18.exe

windows7-x64

7

3d3e00fcc2...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3d3e00fcc2f14a9e8ebb56b6c2d669cf_JaffaCakes118

  • Size

    506KB

  • Sample

    241013-cp1rwstgpc

  • MD5

    3d3e00fcc2f14a9e8ebb56b6c2d669cf

  • SHA1

    2b83485a9356ba3a4e46a86e036e7bf6e9686f0a

  • SHA256

    4d77a9fbd54d22aa9f144718e138964ab4e32b0d16e85fde4026b3182a15ebd0

  • SHA512

    c5e521701351c203880b8aafc609ac9cb9e8f2798f895cfff43e1d160fe9e3bfa62823ec067773c05fa9d7d1b5c37309296113a756703ec2cc88c561798345b0

  • SSDEEP

    12288:01GUsCOYBu9ORDI0jhaHdlgxrZt2QihmVH3OBzAz+4b:01GZlOZI0j89Y1cQpH+a+4b

Score
7/10
discovery

Malware Config

Targets

    • Target

      3d3e00fcc2f14a9e8ebb56b6c2d669cf_JaffaCakes118

    • Size

      506KB

    • MD5

      3d3e00fcc2f14a9e8ebb56b6c2d669cf

    • SHA1

      2b83485a9356ba3a4e46a86e036e7bf6e9686f0a

    • SHA256

      4d77a9fbd54d22aa9f144718e138964ab4e32b0d16e85fde4026b3182a15ebd0

    • SHA512

      c5e521701351c203880b8aafc609ac9cb9e8f2798f895cfff43e1d160fe9e3bfa62823ec067773c05fa9d7d1b5c37309296113a756703ec2cc88c561798345b0

    • SSDEEP

      12288:01GUsCOYBu9ORDI0jhaHdlgxrZt2QihmVH3OBzAz+4b:01GZlOZI0j89Y1cQpH+a+4b

    Score
    7/10
    discovery

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks