Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4b76337dca67c94ec61ecc0953ec31b8_JaffaCakes118

  • Size

    3.2MB

  • Sample

    240715-z8s8gszejj

  • MD5

    4b76337dca67c94ec61ecc0953ec31b8

  • SHA1

    2122e102bdd8b93dcd89bd7506366dc994a9f580

  • SHA256

    713c38eece5d48b3715168f301f6612b31ece48e75450707a044d9c28a1b6428

  • SHA512

    dcf234a952ee4156e34e6df4a65e0a0b96c463fbdf49f5bec2fc73391292f807c46fbe397958ebfac8d0eb44f6ea224e99e91af78989017be596d72433c34dd3

  • SSDEEP

    98304:VYo2FyBGeqnNKN0gnc8qemokMo6tT6C4:V0YBGvNKrc8qxokB6Ah

Score
7/10

Malware Config

Targets

    • Target

      4b76337dca67c94ec61ecc0953ec31b8_JaffaCakes118

    • Size

      3.2MB

    • MD5

      4b76337dca67c94ec61ecc0953ec31b8

    • SHA1

      2122e102bdd8b93dcd89bd7506366dc994a9f580

    • SHA256

      713c38eece5d48b3715168f301f6612b31ece48e75450707a044d9c28a1b6428

    • SHA512

      dcf234a952ee4156e34e6df4a65e0a0b96c463fbdf49f5bec2fc73391292f807c46fbe397958ebfac8d0eb44f6ea224e99e91af78989017be596d72433c34dd3

    • SSDEEP

      98304:VYo2FyBGeqnNKN0gnc8qemokMo6tT6C4:V0YBGvNKrc8qxokB6Ah

    Score
    7/10
    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks