Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    81b920a2751255dae1257dcb92ecf68e_JaffaCakes118

  • Size

    4.0MB

  • Sample

    240529-ymt28afg7y

  • MD5

    81b920a2751255dae1257dcb92ecf68e

  • SHA1

    bcfad187eaf61bb77b3861d512c8fc92df41295d

  • SHA256

    f39b8e2e21f9736d0ee767b97543dceb58c7dd60baaf50eada5aec73f8613c77

  • SHA512

    06c01e1ab0209ad6519f3da60c4c4dfc90c0b069c0d58cb3acf63ca708be6c149492823cdc6a01f1a7a8aadfec64e12522bd10198b1d81404bf8761e12d07add

  • SSDEEP

    98304:/S4EprbxWVhe2LI4xiXuBeGeOhOPYNvh9YJ1zZ0xxI4ItpyMlKx01q:/SNWbNBYAZLYJPc/ItWxT

Score
7/10

Malware Config

Targets

    • Target

      81b920a2751255dae1257dcb92ecf68e_JaffaCakes118

    • Size

      4.0MB

    • MD5

      81b920a2751255dae1257dcb92ecf68e

    • SHA1

      bcfad187eaf61bb77b3861d512c8fc92df41295d

    • SHA256

      f39b8e2e21f9736d0ee767b97543dceb58c7dd60baaf50eada5aec73f8613c77

    • SHA512

      06c01e1ab0209ad6519f3da60c4c4dfc90c0b069c0d58cb3acf63ca708be6c149492823cdc6a01f1a7a8aadfec64e12522bd10198b1d81404bf8761e12d07add

    • SSDEEP

      98304:/S4EprbxWVhe2LI4xiXuBeGeOhOPYNvh9YJ1zZ0xxI4ItpyMlKx01q:/SNWbNBYAZLYJPc/ItWxT

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks