Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5

JaffaCakes...bf.exe

windows7-x64

10

JaffaCakes...bf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6962c12d1e5919c30eb4b71b004d17bf

  • Size

    224KB

  • Sample

    250103-bs7tyatmdv

  • MD5

    6962c12d1e5919c30eb4b71b004d17bf

  • SHA1

    a43697ee6741a916b68a7a1712b0378fad78be19

  • SHA256

    d897ccd4e40f1219011698d30d4004b70edd71970689811213c53600563ca3eb

  • SHA512

    6ed5cd486b539dbdad0201f469ef6c362beeb12dbdf506612fd40040bbc3f445625c8294bfe52f07f9eb016af91e5d83e305877504e23f2ac2c4c783bc8f11f1

  • SSDEEP

    3072:vHjk+0oLnWFnzBHv/xWFsg8WatFBGFVWPE5ac0pG/1z+QVMbg1jm0+J:Po/BHng5HaVG4G/1z+QVMbg1jv+

Score
10/10
vobfusdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_6962c12d1e5919c30eb4b71b004d17bf

    • Size

      224KB

    • MD5

      6962c12d1e5919c30eb4b71b004d17bf

    • SHA1

      a43697ee6741a916b68a7a1712b0378fad78be19

    • SHA256

      d897ccd4e40f1219011698d30d4004b70edd71970689811213c53600563ca3eb

    • SHA512

      6ed5cd486b539dbdad0201f469ef6c362beeb12dbdf506612fd40040bbc3f445625c8294bfe52f07f9eb016af91e5d83e305877504e23f2ac2c4c783bc8f11f1

    • SSDEEP

      3072:vHjk+0oLnWFnzBHv/xWFsg8WatFBGFVWPE5ac0pG/1z+QVMbg1jm0+J:Po/BHng5HaVG4G/1z+QVMbg1jv+

    Score
    10/10
    vobfusdiscoverypersistenceupxworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Vobfus family

      vobfus

    • Adds policy Run key to start application

      persistence

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks