Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

ae89db010f...18.exe

windows7-x64

7

ae89db010f...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ae89db010fd533af75feb01103816a94_JaffaCakes118

  • Size

    761KB

  • Sample

    240820-khp1tawepr

  • MD5

    ae89db010fd533af75feb01103816a94

  • SHA1

    69368e2c360e6943d3973f567c6319f1becee693

  • SHA256

    2a7efa570d21944aa645e95509be2c81af0a9259d14fa4c9fe6abeb5451e63e7

  • SHA512

    6bdd9fb45fa93ce068c4c133e5522fb92496354b07cdb48ebd2f943a87613083aad24a81df3f054b7d1618a1b79c7095419367446c1385a2d664ab6341e5be04

  • SSDEEP

    12288:LhTAyR9exvqSwmpxEQL+B9VXSZoReXwgElZi0WqgnnIT7ZP8in0+JNAnIhhvu7LX:LhT/j1mpxEvB+gVlLWq6IT7ZP8C2qhWf

Score
7/10
discoveryevasionthemida

Malware Config

Targets

    • Target

      ae89db010fd533af75feb01103816a94_JaffaCakes118

    • Size

      761KB

    • MD5

      ae89db010fd533af75feb01103816a94

    • SHA1

      69368e2c360e6943d3973f567c6319f1becee693

    • SHA256

      2a7efa570d21944aa645e95509be2c81af0a9259d14fa4c9fe6abeb5451e63e7

    • SHA512

      6bdd9fb45fa93ce068c4c133e5522fb92496354b07cdb48ebd2f943a87613083aad24a81df3f054b7d1618a1b79c7095419367446c1385a2d664ab6341e5be04

    • SSDEEP

      12288:LhTAyR9exvqSwmpxEQL+B9VXSZoReXwgElZi0WqgnnIT7ZP8in0+JNAnIhhvu7LX:LhT/j1mpxEvB+gVlLWq6IT7ZP8C2qhWf

    Score
    7/10
    discoveryevasionthemida

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks