Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

150e4a7ae5...18.exe

windows7-x64

9

150e4a7ae5...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    150e4a7ae550b391f3cefd0632d9f2db_JaffaCakes118

  • Size

    602KB

  • Sample

    240627-hpcyqazeqr

  • MD5

    150e4a7ae550b391f3cefd0632d9f2db

  • SHA1

    e93253a63e7c36903635b6063987d13d8f23b906

  • SHA256

    bfd8a5e6ad2664896bc530e17de2afccc65dc3c0cd452e2b6322fea0c14ce5b5

  • SHA512

    c9050c8103a330b1f79c1a078ee13e7479d3b44214e31bc421892aafc044b1815a554bf0d95501fc8cc96a00c750605ff1dc42de10c4e8ae24fd81521aeb5d51

  • SSDEEP

    12288:YFLYhqdgwsDOdK+J3Imlq4xFbcx2vcyzLtZWzenJSzPv6:YFLkjw5J3Imlq4u2vcGrWaniPv6

Score
9/10
evasionupx

Malware Config

Targets

    • Target

      150e4a7ae550b391f3cefd0632d9f2db_JaffaCakes118

    • Size

      602KB

    • MD5

      150e4a7ae550b391f3cefd0632d9f2db

    • SHA1

      e93253a63e7c36903635b6063987d13d8f23b906

    • SHA256

      bfd8a5e6ad2664896bc530e17de2afccc65dc3c0cd452e2b6322fea0c14ce5b5

    • SHA512

      c9050c8103a330b1f79c1a078ee13e7479d3b44214e31bc421892aafc044b1815a554bf0d95501fc8cc96a00c750605ff1dc42de10c4e8ae24fd81521aeb5d51

    • SSDEEP

      12288:YFLYhqdgwsDOdK+J3Imlq4xFbcx2vcyzLtZWzenJSzPv6:YFLkjw5J3Imlq4u2vcGrWaniPv6

    Score
    9/10
    evasionupx

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Enumerates VirtualBox registry keys

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks