Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

56a92073d2...18.exe

windows7-x64

10

56a92073d2...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56a92073d21fd0cc5b4a86e3b30c8dbd_JaffaCakes118

  • Size

    248KB

  • Sample

    241018-legeyasajl

  • MD5

    56a92073d21fd0cc5b4a86e3b30c8dbd

  • SHA1

    7f2c149cb819e318ad6738d8f730d0c9b78aa575

  • SHA256

    54d0452752fdcdb2401ed82f3314b2ca8f1b57d581d0881463d82553e89dbd0e

  • SHA512

    fd318573975ecdeabc2ef4ab3fc4ecaf025c9f5d75b7eb5120fe4d99c0e27ccf3dcdaaefec5b11b04d8034b47375a25944d936b0fe3a083db0dcc3f81d71b6be

  • SSDEEP

    3072:lyOYKLJ6LQIv3gb0+a2R0u48WfMgiSw3YXPlnOpVVaTkAnk4JV8Hv49mLslz:lJJLJQQb0zJf94o/lKNcJV8Hv49mLa

Score
10/10
discoveryevasionpersistenceupx

Malware Config

Targets

    • Target

      56a92073d21fd0cc5b4a86e3b30c8dbd_JaffaCakes118

    • Size

      248KB

    • MD5

      56a92073d21fd0cc5b4a86e3b30c8dbd

    • SHA1

      7f2c149cb819e318ad6738d8f730d0c9b78aa575

    • SHA256

      54d0452752fdcdb2401ed82f3314b2ca8f1b57d581d0881463d82553e89dbd0e

    • SHA512

      fd318573975ecdeabc2ef4ab3fc4ecaf025c9f5d75b7eb5120fe4d99c0e27ccf3dcdaaefec5b11b04d8034b47375a25944d936b0fe3a083db0dcc3f81d71b6be

    • SSDEEP

      3072:lyOYKLJ6LQIv3gb0+a2R0u48WfMgiSw3YXPlnOpVVaTkAnk4JV8Hv49mLslz:lJJLJQQb0zJf94o/lKNcJV8Hv49mLa

    Score
    10/10
    discoveryevasionpersistenceupx

    • Modifies firewall policy service

      evasion

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks