Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

JaffaCakes...80.exe

windows7-x64

10

JaffaCakes...80.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_071a1968095df7cd94f071413bab8180

  • Size

    201KB

  • Sample

    250219-xayzzaykt9

  • MD5

    071a1968095df7cd94f071413bab8180

  • SHA1

    8a94048279be743a6ca37f4229c17dcfcd662050

  • SHA256

    584db6d47e147f6b1239a0a16e82ef0a91e683f65076e2361fd65a508b03f891

  • SHA512

    0710a266d34a5ec41d071693547a9a9a985890398eb9481a031ee32d2249568d0b6007d0a355bd345a5c7bb9dd488a42029efbab59243f3cb6aabbe2f4db95c7

  • SSDEEP

    6144:Hza2Nj+MLxwkcWTq/81DDiSTz9nqEja3TXU0xtFu:HqEjk7l7Fu

Score
10/10
parallaxdiscoverypersistenceratupx

Malware Config

Targets

    • Target

      JaffaCakes118_071a1968095df7cd94f071413bab8180

    • Size

      201KB

    • MD5

      071a1968095df7cd94f071413bab8180

    • SHA1

      8a94048279be743a6ca37f4229c17dcfcd662050

    • SHA256

      584db6d47e147f6b1239a0a16e82ef0a91e683f65076e2361fd65a508b03f891

    • SHA512

      0710a266d34a5ec41d071693547a9a9a985890398eb9481a031ee32d2249568d0b6007d0a355bd345a5c7bb9dd488a42029efbab59243f3cb6aabbe2f4db95c7

    • SSDEEP

      6144:Hza2Nj+MLxwkcWTq/81DDiSTz9nqEja3TXU0xtFu:HqEjk7l7Fu

    Score
    10/10
    parallaxdiscoverypersistenceratupx

    • Parallax family

      parallax

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks