Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7

3ba64a359b...18.exe

windows7-x64

8

3ba64a359b...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ba64a359b74ac8153763b5562f34a4f_JaffaCakes118

  • Size

    415KB

  • Sample

    240712-ctmqtsxclb

  • MD5

    3ba64a359b74ac8153763b5562f34a4f

  • SHA1

    abdd04c17f9edaab63ccddab16160f446e24bbb1

  • SHA256

    38cb941ec11b3742682daa12bf34c8ce671e444870af87fa400e16f606b0952d

  • SHA512

    767e540bbb25cee2504e75c91f5c34cc647ee7783f6669aab76804a5f0a615f55b18e09682b11f2898a493be481a26489188d3342b58d5ede1baf613377f64fe

  • SSDEEP

    12288:qv6ap4FpYvkOAmu02KbGqW63sYB12uoU:pap4nWF/9RbGAsYB1CU

Score
8/10
evasiontrojanvmprotect

Malware Config

Targets

    • Target

      3ba64a359b74ac8153763b5562f34a4f_JaffaCakes118

    • Size

      415KB

    • MD5

      3ba64a359b74ac8153763b5562f34a4f

    • SHA1

      abdd04c17f9edaab63ccddab16160f446e24bbb1

    • SHA256

      38cb941ec11b3742682daa12bf34c8ce671e444870af87fa400e16f606b0952d

    • SHA512

      767e540bbb25cee2504e75c91f5c34cc647ee7783f6669aab76804a5f0a615f55b18e09682b11f2898a493be481a26489188d3342b58d5ede1baf613377f64fe

    • SSDEEP

      12288:qv6ap4FpYvkOAmu02KbGqW63sYB12uoU:pap4nWF/9RbGAsYB1CU

    Score
    8/10
    evasiontrojanvmprotect

    • Drops file in Drivers directory

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Checks whether UAC is enabled

      evasiontrojan

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks