Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

f459d03a15...18.exe

windows7-x64

10

f459d03a15...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f459d03a15ead8da9b0823ec359263b2_JaffaCakes118

  • Size

    33KB

  • Sample

    241215-rfwh5sylbr

  • MD5

    f459d03a15ead8da9b0823ec359263b2

  • SHA1

    ca913d60a077e822a0445f69afa9375c46cde751

  • SHA256

    b5c394694e4f01b7d8a9f3b1e702089aa163477e26f2954d30abfd025ce287e9

  • SHA512

    c6fb2422259825ab3d7856c0384fa6d230906bdf684d1aa4403a70e9f0719d72320ff047b653f687d4e3122ea2e2768e9e9ca4670ae822e68861334a23856472

  • SSDEEP

    768:xMuijtHf5g7/IIG3bGcYDBSvFIWuePQDGEsgRMdd5rd54Y5sR6nkhnvS:aNW71rcYDAWeoDrsEud5rdKY58nv

Score
10/10
xtremeratdiscoverypersistenceratspywareupx

Malware Config

Targets

    • Target

      f459d03a15ead8da9b0823ec359263b2_JaffaCakes118

    • Size

      33KB

    • MD5

      f459d03a15ead8da9b0823ec359263b2

    • SHA1

      ca913d60a077e822a0445f69afa9375c46cde751

    • SHA256

      b5c394694e4f01b7d8a9f3b1e702089aa163477e26f2954d30abfd025ce287e9

    • SHA512

      c6fb2422259825ab3d7856c0384fa6d230906bdf684d1aa4403a70e9f0719d72320ff047b653f687d4e3122ea2e2768e9e9ca4670ae822e68861334a23856472

    • SSDEEP

      768:xMuijtHf5g7/IIG3bGcYDBSvFIWuePQDGEsgRMdd5rd54Y5sR6nkhnvS:aNW71rcYDAWeoDrsEud5rdKY58nv

    Score
    10/10
    xtremeratdiscoverypersistenceratspywareupx

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Xtremerat family

      xtremerat

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks