Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

e29276d2e1...18.exe

windows7-x64

10

e29276d2e1...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e29276d2e1b603045ad04aa25d92f598_JaffaCakes118

  • Size

    1.3MB

  • Sample

    240406-py935sae8v

  • MD5

    e29276d2e1b603045ad04aa25d92f598

  • SHA1

    316289129d4c517e688ef3b65972f58a9744e2c7

  • SHA256

    d4b9956fb6735fdbfc93b8fa58aefbdd35e8c4af7a9e899100229c168a4c9328

  • SHA512

    4f0bdf500c8d4a12b3bd51272d1833df0e66e6a3e48c61b456c995a09b21824c9d1f401c295f2b200a0993e8d1801374fa05a6cba0d6bcdc18db8a6459320362

  • SSDEEP

    24576:wEjoYMxkryuy66pUG8lkGs/LkhFArYVjD5js89UrmMnfk/iQ2+S0d:wpvxuvD6px8qGs/YhZVj9jsaU9fk/Pj

Score
10/10
snakekeyloggerkeyloggerstealer

Malware Config

Targets

    • Target

      e29276d2e1b603045ad04aa25d92f598_JaffaCakes118

    • Size

      1.3MB

    • MD5

      e29276d2e1b603045ad04aa25d92f598

    • SHA1

      316289129d4c517e688ef3b65972f58a9744e2c7

    • SHA256

      d4b9956fb6735fdbfc93b8fa58aefbdd35e8c4af7a9e899100229c168a4c9328

    • SHA512

      4f0bdf500c8d4a12b3bd51272d1833df0e66e6a3e48c61b456c995a09b21824c9d1f401c295f2b200a0993e8d1801374fa05a6cba0d6bcdc18db8a6459320362

    • SSDEEP

      24576:wEjoYMxkryuy66pUG8lkGs/LkhFArYVjD5js89UrmMnfk/iQ2+S0d:wpvxuvD6px8qGs/YhZVj9jsaU9fk/Pj

    Score
    10/10
    snakekeyloggerkeyloggerstealer

    • Snake Keylogger

      Keylogger and Infostealer first seen in November 2020.

      stealerkeyloggersnakekeylogger

    • Snake Keylogger payload

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks