Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    32be55093b511a933e492973071a2156_JaffaCakes118

  • Size

    772KB

  • Sample

    240710-blws4axdjj

  • MD5

    32be55093b511a933e492973071a2156

  • SHA1

    9579941948add775b01ed1501e1a3f5a76e648ec

  • SHA256

    eec18896995a756f7c4f39914456d2fb6377584a62ad5604f191828efa341691

  • SHA512

    81a8691eb502b7765297306bb7bc6b5661f301a1d78981bbc451d093ec4c98339767366db396500f6e6543fd0ab565f79bd93c7bc2217291a78c25536f3de497

  • SSDEEP

    12288:ZiMTzbr7IVwmpcTNTuzENNXRgRInBZqpzUF4AnjZnMei/SFfdYTQSiyWq8Aq:Mor0V6TNTuwj3qtURjZnli5k5yWq

Score
7/10

Malware Config

Targets

    • Target

      32be55093b511a933e492973071a2156_JaffaCakes118

    • Size

      772KB

    • MD5

      32be55093b511a933e492973071a2156

    • SHA1

      9579941948add775b01ed1501e1a3f5a76e648ec

    • SHA256

      eec18896995a756f7c4f39914456d2fb6377584a62ad5604f191828efa341691

    • SHA512

      81a8691eb502b7765297306bb7bc6b5661f301a1d78981bbc451d093ec4c98339767366db396500f6e6543fd0ab565f79bd93c7bc2217291a78c25536f3de497

    • SSDEEP

      12288:ZiMTzbr7IVwmpcTNTuzENNXRgRInBZqpzUF4AnjZnMei/SFfdYTQSiyWq8Aq:Mor0V6TNTuwj3qtURjZnli5k5yWq

    Score
    7/10
    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks