Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

8a1ccdb5dc...18.dll

windows7-x64

7

8a1ccdb5dc...18.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a1ccdb5dcf1fb6ffe35606718846520_JaffaCakes118

  • Size

    978KB

  • Sample

    240811-m5bg2s1cke

  • MD5

    8a1ccdb5dcf1fb6ffe35606718846520

  • SHA1

    0539b5ccf05e80c50285dde0ae6666045995bdde

  • SHA256

    754188e2ec88eff6c58d1b46052ae9449b8b8b0ea86da03c8faea1f634ded5ac

  • SHA512

    0440ff0f4726e45fd6cae818d2922f0c45a515f069077902f1290e5d2056b2c9a01bd7bc7208cd61df31e6cf2baae83fe84d3155d2819f80f60e7e4854df42b9

  • SSDEEP

    24576:d5BjQFSKdqnZQEEOp1lhNkMweTb1L6dp:SdbMw0bd63

Score
7/10
discoveryevasionthemida

Malware Config

Targets

    • Target

      8a1ccdb5dcf1fb6ffe35606718846520_JaffaCakes118

    • Size

      978KB

    • MD5

      8a1ccdb5dcf1fb6ffe35606718846520

    • SHA1

      0539b5ccf05e80c50285dde0ae6666045995bdde

    • SHA256

      754188e2ec88eff6c58d1b46052ae9449b8b8b0ea86da03c8faea1f634ded5ac

    • SHA512

      0440ff0f4726e45fd6cae818d2922f0c45a515f069077902f1290e5d2056b2c9a01bd7bc7208cd61df31e6cf2baae83fe84d3155d2819f80f60e7e4854df42b9

    • SSDEEP

      24576:d5BjQFSKdqnZQEEOp1lhNkMweTb1L6dp:SdbMw0bd63

    Score
    7/10
    discoveryevasionthemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks