Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

5

DevManager...��.url

windows7-x64

1

DevManager...��.url

windows10-2004-x64

1

DevManager...er.exe

windows7-x64

7

DevManager...er.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    54f0a2679276836385d3aee731748b9d_JaffaCakes118

  • Size

    489KB

  • Sample

    241018-cremfa1cqe

  • MD5

    54f0a2679276836385d3aee731748b9d

  • SHA1

    6a007548169e6ca8eb6f83cc3c1cc68eda7c0f65

  • SHA256

    a9e254d7bcaf5c33873f0b757e82ea736031bfc9e2b21605c6f16b9fd4f46895

  • SHA512

    28bcf1e12cbacf861d0ea470b425209cd1c3c5461db59a2e1943a6ace7c74393298549ea9cbb5aea0be6e1d4dc9a37c48cbf1893ba1036aee40f33777b587a10

  • SSDEEP

    12288:XF5v59SxOgVOWGIovcIjowg3f+4bwjaY0WSw:XbvrSxOOX7gcIjod3fNsjB0WSw

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      DevManager/173ɫ.url

    • Size

      402B

    • MD5

      ae411f6833c75cc0d0579c93b9129959

    • SHA1

      036966a128861e6874067eccb3cac4e1064b022c

    • SHA256

      082852d51894343c1d198f16f67a6ca59e9feca4b7181861746f5703885ffbb0

    • SHA512

      a88e36929c3553b9890f036030ee2a7b0f40e2a0b18d4c41831de936f6d17f09083271c96418ae5ff0b1218070ac5b6d852b252580dd5c4b42e480ae5c4cc4b1

    Score
    1/10
    behavioral1behavioral2

    • Target

      DevManager/DevManager.exe

    • Size

      494KB

    • MD5

      0109a891c39acb8c0c5285d8e67ccd7e

    • SHA1

      cb06b1a79aa67752e0c288f04a239bee1811725a

    • SHA256

      4c263a080f0b64531ce51df30afe78dac4127195d02fe94ebb768c026eb42d91

    • SHA512

      c9fb5db57225c49e4cd639c8b5f56f809675ac57bc1f58b65a79e00af5ca4c2c644b5d3ae0810fdc4da619cb39f4792856ed43c55bf22805bcbfb505c53df18c

    • SSDEEP

      12288:LjkArEN249AyE/rbaMct4bO2/xTMp6Ijswghf+gbwlaY0Wgr:AFE//Tct4bOsB06IjsdhfHslB0Wgr

    Score
    7/10
    discoveryupx

    • Executes dropped EXE

    • Loads dropped DLL

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks