Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

0d1c90a830...18.exe

windows7-x64

10

0d1c90a830...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d1c90a830f731e6eefc40f7401df240_JaffaCakes118

  • Size

    176KB

  • Sample

    240625-hrzv9svhmg

  • MD5

    0d1c90a830f731e6eefc40f7401df240

  • SHA1

    e41de2563c50bb787a46b7393c1cd6ac21df9293

  • SHA256

    aebdfac12809398fe17f1f559c6e77022e9aa01893397060f30ce1a5d57272be

  • SHA512

    ff10a9888ad57ea38d8c5163a1e8b80b9c4ee7d3937f01d1f3a613c55c2c9fd958bb316d15103a7ab1da4c486b23c35308dff544019aff2424bedd905d36d84f

  • SSDEEP

    1536:k/WdbpSAH1TQWZS+fN2Ep0FWW4PQV1vh8bJaAj+IXn8zzUYp:k/WdpSQ1TZZS+vp0FW1PQV1vhpM83jp

Score
10/10
evasiontrojan

Malware Config

Targets

    • Target

      0d1c90a830f731e6eefc40f7401df240_JaffaCakes118

    • Size

      176KB

    • MD5

      0d1c90a830f731e6eefc40f7401df240

    • SHA1

      e41de2563c50bb787a46b7393c1cd6ac21df9293

    • SHA256

      aebdfac12809398fe17f1f559c6e77022e9aa01893397060f30ce1a5d57272be

    • SHA512

      ff10a9888ad57ea38d8c5163a1e8b80b9c4ee7d3937f01d1f3a613c55c2c9fd958bb316d15103a7ab1da4c486b23c35308dff544019aff2424bedd905d36d84f

    • SSDEEP

      1536:k/WdbpSAH1TQWZS+fN2Ep0FWW4PQV1vh8bJaAj+IXn8zzUYp:k/WdpSQ1TZZS+vp0FW1PQV1vhpM83jp

    Score
    10/10
    evasiontrojan

    • UAC bypass

      evasiontrojan

    • Windows security bypass

      evasiontrojan

    • Windows security modification

      evasiontrojan

    • Checks whether UAC is enabled

      evasiontrojan

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks