Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

0ceeddad6a...18.exe

windows7-x64

7

0ceeddad6a...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0ceeddad6a44ed3991d84b4ec7243200_JaffaCakes118

  • Size

    588KB

  • Sample

    240502-acpsradb67

  • MD5

    0ceeddad6a44ed3991d84b4ec7243200

  • SHA1

    42d9287608774bd711255eb0d5507c548dd97ad1

  • SHA256

    43ffe045cfbf5729249d24b9acd7d4b4abea94b257075f54db0e66a436ff9755

  • SHA512

    a39a0c310d0b3ccf8db7e705d1e83a2291223cf9e86bc79953043a89ae3f3b0f84162799ec94b40ed95ec5c2f96eb3f1b80b83ccdba40e9ad4f806620ff01c70

  • SSDEEP

    12288:GXznQ+bCxWrUhLZvzC/igEhrNA9SNwyrYAmyhIna3PiGpYh7jH:3gIh0/iLhrekeKYAl4RNH

Score
7/10

Malware Config

Targets

    • Target

      0ceeddad6a44ed3991d84b4ec7243200_JaffaCakes118

    • Size

      588KB

    • MD5

      0ceeddad6a44ed3991d84b4ec7243200

    • SHA1

      42d9287608774bd711255eb0d5507c548dd97ad1

    • SHA256

      43ffe045cfbf5729249d24b9acd7d4b4abea94b257075f54db0e66a436ff9755

    • SHA512

      a39a0c310d0b3ccf8db7e705d1e83a2291223cf9e86bc79953043a89ae3f3b0f84162799ec94b40ed95ec5c2f96eb3f1b80b83ccdba40e9ad4f806620ff01c70

    • SSDEEP

      12288:GXznQ+bCxWrUhLZvzC/igEhrNA9SNwyrYAmyhIna3PiGpYh7jH:3gIh0/iLhrekeKYAl4RNH

    Score
    7/10

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks