Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

48e1bce53c...18.exe

windows7-x64

1

48e1bce53c...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    48e1bce53c5a67ba932e14a2ff2c581d_JaffaCakes118

  • Size

    667KB

  • Sample

    240516-bhjz5adc8v

  • MD5

    48e1bce53c5a67ba932e14a2ff2c581d

  • SHA1

    19e4d21efeacbd608883a10d3acb0489b2b4c84f

  • SHA256

    046b02492be9724cfc32b7dd363d99e3f2aef7696e4b5befcc1a52f9fdc8eb55

  • SHA512

    5737bd6ceb664285c6119e4e9fef64faf8608f643513e35dec72a6e29e20254575f6aea31c35f90f8d9708fc102557d5ff51d706c8fd67f2b607c527c8919d9c

  • SSDEEP

    12288:T8rqkM4RxFPeGUEyD8V5SJVvImhxhBDRR6Oifc3OY3MCP9rdOb6x:QrqkM4AGUAjSJVrhxhZRCYljOb6x

Score
9/10
evasion

Malware Config

Targets

    • Target

      48e1bce53c5a67ba932e14a2ff2c581d_JaffaCakes118

    • Size

      667KB

    • MD5

      48e1bce53c5a67ba932e14a2ff2c581d

    • SHA1

      19e4d21efeacbd608883a10d3acb0489b2b4c84f

    • SHA256

      046b02492be9724cfc32b7dd363d99e3f2aef7696e4b5befcc1a52f9fdc8eb55

    • SHA512

      5737bd6ceb664285c6119e4e9fef64faf8608f643513e35dec72a6e29e20254575f6aea31c35f90f8d9708fc102557d5ff51d706c8fd67f2b607c527c8919d9c

    • SSDEEP

      12288:T8rqkM4RxFPeGUEyD8V5SJVvImhxhBDRR6Oifc3OY3MCP9rdOb6x:QrqkM4AGUAjSJVrhxhZRCYljOb6x

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks