d7b954c8aa69104014b7c14f618c81d0848c6a01cb788a650ec87081d114d346 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

5

52a509b638...18.dll

windows7-x64

6

52a509b638...18.dll

windows10-2004-x64

6

Sharing

General

Target

52a509b638973518fcf1a4d7bcd38869_JaffaCakes118
Size

81KB
Sample

241017-t3lcssvbrh
MD5

52a509b638973518fcf1a4d7bcd38869
SHA1

12236e36387bd38727b8c29b6ae6712c06a2ec04
SHA256

d7b954c8aa69104014b7c14f618c81d0848c6a01cb788a650ec87081d114d346
SHA512

2a4395b7dc030af09fd9d79d000e9d962e186a06e8594a7413e8a75273d369ca5cf88a33b012dc149009e4fe4900e1ee6b58be022693287560ec555687178bc4
SSDEEP

768:IQK9XOHKauKlHg5LMWFRlPPg5dtJICnCISMcWNxXQPFpg1:RK9UKTKlHg5LMWPl3kP+CC58X

Score

6^/10

discovery persistence upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

52a509b638973518fcf1a4d7bcd38869_JaffaCakes118.dll

Resource

win7-20240903-en

discovery persistence upx

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

52a509b638973518fcf1a4d7bcd38869_JaffaCakes118.dll

Resource

win10v2004-20241007-en

discovery persistence upx

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  52a509b638973518fcf1a4d7bcd38869_JaffaCakes118
- Size
  
  81KB
- MD5
  
  52a509b638973518fcf1a4d7bcd38869
- SHA1
  
  12236e36387bd38727b8c29b6ae6712c06a2ec04
- SHA256
  
  d7b954c8aa69104014b7c14f618c81d0848c6a01cb788a650ec87081d114d346
- SHA512
  
  2a4395b7dc030af09fd9d79d000e9d962e186a06e8594a7413e8a75273d369ca5cf88a33b012dc149009e4fe4900e1ee6b58be022693287560ec555687178bc4
- SSDEEP
  
  768:IQK9XOHKauKlHg5LMWFRlPPg5dtJICnCISMcWNxXQPFpg1:RK9UKTKlHg5LMWPl3kP+CC58X
Score

6^/10

discovery persistence upx
- Modifies WinLogon
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.