Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ed7288bc8b1099f5c578eec8949265e5_JaffaCakes118

  • Size

    5.5MB

  • Sample

    240411-pw76rseh2x

  • MD5

    ed7288bc8b1099f5c578eec8949265e5

  • SHA1

    35ce20a445a42a6e2c83dde460fffc724193119a

  • SHA256

    a97ead7645f4d9aea1e7ceccd023251fdaef68f9a47396dce2927411d6954e9f

  • SHA512

    7c34603c85c10e8ff4ebec894b53e5b619eb0f040491e8e42fe33b7d4c8ac783b55896571d071ffd52eaaf900d90041dc633fca84f38a8f93c8f488cd62085ff

  • SSDEEP

    98304:Cb5tK7eL0MnxfuD26M8pfVAIFQP5Q/ZjTtHuI28GSd3YPnvW8yrNpm1trn:OKaL0MxfmjfnMuxTtOI28GSd3YXgP8tj

Score
9/10

Malware Config

Targets

    • Target

      ed7288bc8b1099f5c578eec8949265e5_JaffaCakes118

    • Size

      5.5MB

    • MD5

      ed7288bc8b1099f5c578eec8949265e5

    • SHA1

      35ce20a445a42a6e2c83dde460fffc724193119a

    • SHA256

      a97ead7645f4d9aea1e7ceccd023251fdaef68f9a47396dce2927411d6954e9f

    • SHA512

      7c34603c85c10e8ff4ebec894b53e5b619eb0f040491e8e42fe33b7d4c8ac783b55896571d071ffd52eaaf900d90041dc633fca84f38a8f93c8f488cd62085ff

    • SSDEEP

      98304:Cb5tK7eL0MnxfuD26M8pfVAIFQP5Q/ZjTtHuI28GSd3YPnvW8yrNpm1trn:OKaL0MxfmjfnMuxTtOI28GSd3YXgP8tj

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks whether UAC is enabled

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks