Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a84d18527885b3b9d42093d66debc7c0_JaffaCakes118

  • Size

    485KB

  • Sample

    240818-1e8lrayeqm

  • MD5

    a84d18527885b3b9d42093d66debc7c0

  • SHA1

    6cbac09bef26363f4614c401a4bb5d493f63a14a

  • SHA256

    4b5ede931f49f4e9b2514e46af49b301098c1fc9e0e6d4516c554adc6ea59392

  • SHA512

    97f32e1ee3ab098b95a3fcf74b44432b116bcb5121fcbedc89d112ecb8f31db907d812c299197ed0b816b209c5e56b9255159cc2017f7c0d5321bff74779df62

  • SSDEEP

    12288:eOsUlz7aePUqGYgZ7KE27/NpDrFiCXu3a+1FofM:RsQKx7KNfDRjX2a+1wM

Score
9/10

Malware Config

Targets

    • Target

      a84d18527885b3b9d42093d66debc7c0_JaffaCakes118

    • Size

      485KB

    • MD5

      a84d18527885b3b9d42093d66debc7c0

    • SHA1

      6cbac09bef26363f4614c401a4bb5d493f63a14a

    • SHA256

      4b5ede931f49f4e9b2514e46af49b301098c1fc9e0e6d4516c554adc6ea59392

    • SHA512

      97f32e1ee3ab098b95a3fcf74b44432b116bcb5121fcbedc89d112ecb8f31db907d812c299197ed0b816b209c5e56b9255159cc2017f7c0d5321bff74779df62

    • SSDEEP

      12288:eOsUlz7aePUqGYgZ7KE27/NpDrFiCXu3a+1FofM:RsQKx7KNfDRjX2a+1wM

    Score
    9/10
    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

    • Enumerates VirtualBox registry keys

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks