Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

78c5c2db96...18.exe

windows7-x64

10

78c5c2db96...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    78c5c2db96bfdd238ac0dd5bee2bce5b_JaffaCakes118

  • Size

    1.5MB

  • Sample

    241028-kw1z8svepd

  • MD5

    78c5c2db96bfdd238ac0dd5bee2bce5b

  • SHA1

    81c3c1d0ddb30da089dd47242286ae8b476c5d71

  • SHA256

    5d212770151fffd697609fbd09e19f3e148b61fb6caea1b836d8e024dbf232f1

  • SHA512

    5aea8ae331fd916d49b5fc4c791951ce57ba7afc16467718636812775f2d11f1dff59156397000bfcd780bc8ec720e2ee5eea85707bfee14da67a2e57f593a36

  • SSDEEP

    24576:SlGhL2RMK23ZbL3yMP46SBehe/nG3FXY9mH0Lo03G7ua8K5uCVV6xilORAwJ6cpk:vc/2cjzGqgHI3G7ua35JVV6UluZpSl93

Score
10/10
luminositydiscoverypersistenceratupx

Malware Config

Targets

    • Target

      78c5c2db96bfdd238ac0dd5bee2bce5b_JaffaCakes118

    • Size

      1.5MB

    • MD5

      78c5c2db96bfdd238ac0dd5bee2bce5b

    • SHA1

      81c3c1d0ddb30da089dd47242286ae8b476c5d71

    • SHA256

      5d212770151fffd697609fbd09e19f3e148b61fb6caea1b836d8e024dbf232f1

    • SHA512

      5aea8ae331fd916d49b5fc4c791951ce57ba7afc16467718636812775f2d11f1dff59156397000bfcd780bc8ec720e2ee5eea85707bfee14da67a2e57f593a36

    • SSDEEP

      24576:SlGhL2RMK23ZbL3yMP46SBehe/nG3FXY9mH0Lo03G7ua8K5uCVV6xilORAwJ6cpk:vc/2cjzGqgHI3G7ua35JVV6UluZpSl93

    Score
    10/10
    luminositydiscoverypersistenceratupx

    • Luminosity

      Luminosity is a RAT family that was on sale, while claiming to be a system administration utility.

      ratluminosity

    • Luminosity family

      luminosity

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks