Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

a6470e9631...18.exe

windows7-x64

7

a6470e9631...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a6470e9631ca19c170239e9e73b5a62a_JaffaCakes118

  • Size

    602KB

  • Sample

    240613-szlnqavbqa

  • MD5

    a6470e9631ca19c170239e9e73b5a62a

  • SHA1

    9951a743afac5defc2f21aeb1bf076a7997f907f

  • SHA256

    c7bbd400f518ff8f3f6d41cfc2fb3fb63321ee233f730f78963a3f409be7fb98

  • SHA512

    da470a5c6c8a28218cf2f7dff2659af08561b89293306764fef102fe72b0b09bcf8a8d92ec992e71c10f1fa060c9105235615d97d4b500f1083ece8d722b33a8

  • SSDEEP

    12288:w2lsEzJO9D23VnzykQ3kLzMCo2ulfmaHOH3Kwu2/3:w2lsCJO9DSzTpMC6OXH3K12/3

Score
7/10

Malware Config

Targets

    • Target

      a6470e9631ca19c170239e9e73b5a62a_JaffaCakes118

    • Size

      602KB

    • MD5

      a6470e9631ca19c170239e9e73b5a62a

    • SHA1

      9951a743afac5defc2f21aeb1bf076a7997f907f

    • SHA256

      c7bbd400f518ff8f3f6d41cfc2fb3fb63321ee233f730f78963a3f409be7fb98

    • SHA512

      da470a5c6c8a28218cf2f7dff2659af08561b89293306764fef102fe72b0b09bcf8a8d92ec992e71c10f1fa060c9105235615d97d4b500f1083ece8d722b33a8

    • SSDEEP

      12288:w2lsEzJO9D23VnzykQ3kLzMCo2ulfmaHOH3Kwu2/3:w2lsCJO9DSzTpMC6OXH3K12/3

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks