Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

b792bc00f0...18.exe

windows7-x64

9

b792bc00f0...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b792bc00f0efd99f4ff451730c20c491_JaffaCakes118

  • Size

    532KB

  • Sample

    240617-j3qx6s1hqh

  • MD5

    b792bc00f0efd99f4ff451730c20c491

  • SHA1

    26f53a01c94a2fae3811f122ea4a217fe7fd8bf7

  • SHA256

    2018c94a69b93a2b7349da58e48087244c6536efb23ec3175c180465a56dca4d

  • SHA512

    83f48a2eae460ce373291e8bd758ade541b882c2d59de3b8be329f25dcfb2d8b37abf8e22fd8c5aea901a1e37a62889f04aa4827a0e359aaee269f1df1c5cb72

  • SSDEEP

    12288:tXf2DMo6GCfdog22HXrFy+344+E9OsDYMbWMKyH/rexOww9E:tv2DBCVx5y+3RxDYv9UCxOwwK

Score
9/10
evasion

Malware Config

Targets

    • Target

      b792bc00f0efd99f4ff451730c20c491_JaffaCakes118

    • Size

      532KB

    • MD5

      b792bc00f0efd99f4ff451730c20c491

    • SHA1

      26f53a01c94a2fae3811f122ea4a217fe7fd8bf7

    • SHA256

      2018c94a69b93a2b7349da58e48087244c6536efb23ec3175c180465a56dca4d

    • SHA512

      83f48a2eae460ce373291e8bd758ade541b882c2d59de3b8be329f25dcfb2d8b37abf8e22fd8c5aea901a1e37a62889f04aa4827a0e359aaee269f1df1c5cb72

    • SSDEEP

      12288:tXf2DMo6GCfdog22HXrFy+344+E9OsDYMbWMKyH/rexOww9E:tv2DBCVx5y+3RxDYv9UCxOwwK

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks