Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a379a77933c88a9f1b779cb0da7854cf_JaffaCakes118

  • Size

    3.8MB

  • Sample

    240613-cf75lszhmh

  • MD5

    a379a77933c88a9f1b779cb0da7854cf

  • SHA1

    a3631847582341f727fba8a06990e97ea1b982b8

  • SHA256

    9409cc9a8344450dca6fe3b4be6fcfb66bcf83a60cb67824257b47bdbe849c43

  • SHA512

    daf0f329b9e7010d432540811e2b5fad81c08dd0b6dd0f4d8ffd8cd365c934a152f92a6815792b809cf8b7d38bf6cd8086adbe210a074912a0ffe7cae3674fcb

  • SSDEEP

    98304:uZuarCtWyX0p+tUFHtrXCDHGkSn8b+vPdi:uZHrzyG+2aDHGkS8C4

Score
7/10

Malware Config

Targets

    • Target

      a379a77933c88a9f1b779cb0da7854cf_JaffaCakes118

    • Size

      3.8MB

    • MD5

      a379a77933c88a9f1b779cb0da7854cf

    • SHA1

      a3631847582341f727fba8a06990e97ea1b982b8

    • SHA256

      9409cc9a8344450dca6fe3b4be6fcfb66bcf83a60cb67824257b47bdbe849c43

    • SHA512

      daf0f329b9e7010d432540811e2b5fad81c08dd0b6dd0f4d8ffd8cd365c934a152f92a6815792b809cf8b7d38bf6cd8086adbe210a074912a0ffe7cae3674fcb

    • SSDEEP

      98304:uZuarCtWyX0p+tUFHtrXCDHGkSn8b+vPdi:uZHrzyG+2aDHGkS8C4

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks