Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

661d78bb4c...18.exe

windows7-x64

7

661d78bb4c...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    661d78bb4c281c8b24c13d1878a703c8_JaffaCakes118

  • Size

    136KB

  • Sample

    240723-eylensxglj

  • MD5

    661d78bb4c281c8b24c13d1878a703c8

  • SHA1

    31310b4891bbf41d98b0cd6a52332459434241ed

  • SHA256

    6c876ee3f5df4d231b45606b762148c78a5fd325c218ffe08044eb33e9e6b563

  • SHA512

    da49ff6ef2b29e3b2cd935325b1edacff28f9286653f7744737a4eb53ea3aca289ce032bdfa6f09872db61d6da9bb663b9464a635089563a7f33271876bec26b

  • SSDEEP

    3072:Ektoh5Bew+QMjv5bnz3cT+adE24rTfh4nc:EI2b4QMlb4T+H24vfL

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      661d78bb4c281c8b24c13d1878a703c8_JaffaCakes118

    • Size

      136KB

    • MD5

      661d78bb4c281c8b24c13d1878a703c8

    • SHA1

      31310b4891bbf41d98b0cd6a52332459434241ed

    • SHA256

      6c876ee3f5df4d231b45606b762148c78a5fd325c218ffe08044eb33e9e6b563

    • SHA512

      da49ff6ef2b29e3b2cd935325b1edacff28f9286653f7744737a4eb53ea3aca289ce032bdfa6f09872db61d6da9bb663b9464a635089563a7f33271876bec26b

    • SSDEEP

      3072:Ektoh5Bew+QMjv5bnz3cT+adE24rTfh4nc:EI2b4QMlb4T+H24vfL

    Score
    7/10
    vmprotect

    • Deletes itself

    • Executes dropped EXE

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks