Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0bf00f82af9296d52faf12482ee1f908_JaffaCakes118

  • Size

    3.5MB

  • Sample

    240625-cekypaxhql

  • MD5

    0bf00f82af9296d52faf12482ee1f908

  • SHA1

    d1b502434f783607432816427db07fd65501768c

  • SHA256

    40af80de633040187036b9ed73d48095c1a41ce7b30fa3c6ab286599c8c9ff7f

  • SHA512

    f237b4fe6383d4d03f741a88a732dd409afa75e40911c930497273da25277721e7dd9167f721d5e4f8f50d037f68e67ce5e25c21936ef7c66d171bf2e516f1f6

  • SSDEEP

    98304:xD2Cn94lfGArMKGQ2XA09j30L2k3+ytdu5ekjwg:xD2Cn94l+AAKGQkAL33+dPjp

Score
7/10

Malware Config

Targets

    • Target

      0bf00f82af9296d52faf12482ee1f908_JaffaCakes118

    • Size

      3.5MB

    • MD5

      0bf00f82af9296d52faf12482ee1f908

    • SHA1

      d1b502434f783607432816427db07fd65501768c

    • SHA256

      40af80de633040187036b9ed73d48095c1a41ce7b30fa3c6ab286599c8c9ff7f

    • SHA512

      f237b4fe6383d4d03f741a88a732dd409afa75e40911c930497273da25277721e7dd9167f721d5e4f8f50d037f68e67ce5e25c21936ef7c66d171bf2e516f1f6

    • SSDEEP

      98304:xD2Cn94lfGArMKGQ2XA09j30L2k3+ytdu5ekjwg:xD2Cn94l+AAKGQkAL33+dPjp

    Score
    7/10
    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    • Checks whether UAC is enabled

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks