Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    226091616c2a0004afade9e68742f79d_JaffaCakes118

  • Size

    906KB

  • Sample

    240703-phwwkstfrf

  • MD5

    226091616c2a0004afade9e68742f79d

  • SHA1

    d10b6bd33f0a28dac92471a5316a01951f3d012b

  • SHA256

    186c18261f4b5a4698872baebdf0e9732f8d765f981a22103933cd6ebc004672

  • SHA512

    f371505fc4bcaf0c57ce87ee9f42ae94f23080f05f7ffdec1ddf2db27789590555ee44162a57ece121a3e54f44f8065caa904e495767eb6923e6d5d6673882fa

  • SSDEEP

    12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27Qitj7:r5sJo6YrFUiyAak11Ltj7

Score
7/10

Malware Config

Targets

    • Target

      226091616c2a0004afade9e68742f79d_JaffaCakes118

    • Size

      906KB

    • MD5

      226091616c2a0004afade9e68742f79d

    • SHA1

      d10b6bd33f0a28dac92471a5316a01951f3d012b

    • SHA256

      186c18261f4b5a4698872baebdf0e9732f8d765f981a22103933cd6ebc004672

    • SHA512

      f371505fc4bcaf0c57ce87ee9f42ae94f23080f05f7ffdec1ddf2db27789590555ee44162a57ece121a3e54f44f8065caa904e495767eb6923e6d5d6673882fa

    • SSDEEP

      12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27Qitj7:r5sJo6YrFUiyAak11Ltj7

    Score
    7/10
    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks