Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

f3627fc24c...18.exe

windows7-x64

7

f3627fc24c...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f3627fc24c4ac3d13424142b41d25c25_JaffaCakes118

  • Size

    2.0MB

  • Sample

    240416-ng5lnahb25

  • MD5

    f3627fc24c4ac3d13424142b41d25c25

  • SHA1

    de9087bcf5c765ea399502b48e72044e5c75755e

  • SHA256

    1b66be04a8b84f80512aac71f823cc84a728a98dcb749452278de0b77870050c

  • SHA512

    150d021cb11697563cbd1235ce8ed35b0c1ae03f2280e7ff64be45101f19c6426b534c8d8cd34fc79cec8705a23071278097d31639ceab5be549f7ff50844055

  • SSDEEP

    49152:Ek1JFki5lltzqd4WdMBO/NT+el0A1Mn8ya/odd/gFcB:Ek1JOebqdRLTTg8y5L/mk

Score
7/10
evasionthemida

Malware Config

Targets

    • Target

      f3627fc24c4ac3d13424142b41d25c25_JaffaCakes118

    • Size

      2.0MB

    • MD5

      f3627fc24c4ac3d13424142b41d25c25

    • SHA1

      de9087bcf5c765ea399502b48e72044e5c75755e

    • SHA256

      1b66be04a8b84f80512aac71f823cc84a728a98dcb749452278de0b77870050c

    • SHA512

      150d021cb11697563cbd1235ce8ed35b0c1ae03f2280e7ff64be45101f19c6426b534c8d8cd34fc79cec8705a23071278097d31639ceab5be549f7ff50844055

    • SSDEEP

      49152:Ek1JFki5lltzqd4WdMBO/NT+el0A1Mn8ya/odd/gFcB:Ek1JOebqdRLTTg8y5L/mk

    Score
    7/10
    evasionthemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks