Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5

JaffaCakes...f4.exe

windows7-x64

10

JaffaCakes...f4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_cd2426264f52299afac99215c1c644f4

  • Size

    9.9MB

  • Sample

    250109-t9lxxaxjal

  • MD5

    cd2426264f52299afac99215c1c644f4

  • SHA1

    56ca3484a9d4bc444781ed3f60a376b59d0de902

  • SHA256

    148e632294b6fa101d2d5eb25c9b613de1d57c40cda72ebc48379b093185a056

  • SHA512

    5b2a79d464f918de033ab0e59ed29c4080eab95d39d579072e8fbdacbdd3598ec6470f7406eee5104040ed28d4e6cf25eabe0053dc34dc3dca7573e957b93fa2

  • SSDEEP

    98304:Vbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbi2:7

Score
10/10
vobfusdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_cd2426264f52299afac99215c1c644f4

    • Size

      9.9MB

    • MD5

      cd2426264f52299afac99215c1c644f4

    • SHA1

      56ca3484a9d4bc444781ed3f60a376b59d0de902

    • SHA256

      148e632294b6fa101d2d5eb25c9b613de1d57c40cda72ebc48379b093185a056

    • SHA512

      5b2a79d464f918de033ab0e59ed29c4080eab95d39d579072e8fbdacbdd3598ec6470f7406eee5104040ed28d4e6cf25eabe0053dc34dc3dca7573e957b93fa2

    • SSDEEP

      98304:Vbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbi2:7

    Score
    10/10
    vobfusdiscoverypersistenceupxworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Vobfus family

      vobfus

    • Adds policy Run key to start application

      persistence

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks