Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2e34d9933bcbb900c294a21b352fcee5_JaffaCakes118

  • Size

    409KB

  • Sample

    240708-3ebywsvarj

  • MD5

    2e34d9933bcbb900c294a21b352fcee5

  • SHA1

    89f921f90db70e9ec84d71fd023b3641d27b7623

  • SHA256

    ca38f6e2fd6b910bf8a487dcf0775c6881260f0d02593777b4f0f1ccb0d93eda

  • SHA512

    cf5eda42912cc30af0a58f58841857d812bbf233f1671fce2ffb63cec6cd8039305376677069036686b724a5b20a091055da7af56976575df7233929a4590bbd

  • SSDEEP

    6144:nXgenPyy1Fr645gyGZ6CTZ2sRGUB8nqhz0YLjJoxGq6IECcJrd88mBNQ0:nXgM5Idd/JBkYAYFYGq6ccJp6BO0

Score
10/10

Malware Config

Targets

    • Target

      2e34d9933bcbb900c294a21b352fcee5_JaffaCakes118

    • Size

      409KB

    • MD5

      2e34d9933bcbb900c294a21b352fcee5

    • SHA1

      89f921f90db70e9ec84d71fd023b3641d27b7623

    • SHA256

      ca38f6e2fd6b910bf8a487dcf0775c6881260f0d02593777b4f0f1ccb0d93eda

    • SHA512

      cf5eda42912cc30af0a58f58841857d812bbf233f1671fce2ffb63cec6cd8039305376677069036686b724a5b20a091055da7af56976575df7233929a4590bbd

    • SSDEEP

      6144:nXgenPyy1Fr645gyGZ6CTZ2sRGUB8nqhz0YLjJoxGq6IECcJrd88mBNQ0:nXgM5Idd/JBkYAYFYGq6ccJp6BO0

    Score
    10/10
    • UAC bypass

    • Windows security bypass

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Checks whether UAC is enabled

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks