Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    72122a87f158c073c0eb2d17e60487f7_JaffaCakes118

  • Size

    586KB

  • Sample

    240525-qf72hadg3v

  • MD5

    72122a87f158c073c0eb2d17e60487f7

  • SHA1

    0ac0e4f6a578494ada9557d31b7f9a3e64e4ab86

  • SHA256

    2c0c45a8ee4f73e24e4ef4d3a2d3f3fe288f7b3816f8aaf84507f7358abd2d82

  • SHA512

    89821ba530845dc1da50dfb3de86aa4f47804c2c82aff2276444d384d4e75d085b7ceb0357e097447f55b7259490986154b8443bdfcf194f33842111fccdbd6c

  • SSDEEP

    12288:AXznQ+bCxWrUhLZvzC/igEhrNA9SNwyrYAmyhIna3PiGpYh7jq:xgIh0/iLhrekeKYAl4RNq

Score
7/10

Malware Config

Targets

    • Target

      72122a87f158c073c0eb2d17e60487f7_JaffaCakes118

    • Size

      586KB

    • MD5

      72122a87f158c073c0eb2d17e60487f7

    • SHA1

      0ac0e4f6a578494ada9557d31b7f9a3e64e4ab86

    • SHA256

      2c0c45a8ee4f73e24e4ef4d3a2d3f3fe288f7b3816f8aaf84507f7358abd2d82

    • SHA512

      89821ba530845dc1da50dfb3de86aa4f47804c2c82aff2276444d384d4e75d085b7ceb0357e097447f55b7259490986154b8443bdfcf194f33842111fccdbd6c

    • SSDEEP

      12288:AXznQ+bCxWrUhLZvzC/igEhrNA9SNwyrYAmyhIna3PiGpYh7jq:xgIh0/iLhrekeKYAl4RNq

    Score
    7/10
    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks