Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c788419b6ffbe9fe410ef90a6395afdd_JaffaCakes118

  • Size

    4.7MB

  • Sample

    240828-yhglbssflh

  • MD5

    c788419b6ffbe9fe410ef90a6395afdd

  • SHA1

    146ab901a4e658d0f485d43909aa8cdfb56cb1d3

  • SHA256

    134f2624366cf1b11a72bc7ae194ade3918326264f8031d2c3879e7dc142e011

  • SHA512

    b49914e31a99776fb909bc7b6094ba050f71f4d6e51f85651188110b634d86b8b41dca31a2dbbebcea438d05e3fedbd74997e218289403891124e94ffd8bb791

  • SSDEEP

    98304:Ae4d8iEityhkhqloaxeq7jhIXUvPBnnom2LSqLyi:nCnyhkhBaxem1tPBn2uq3

Score
7/10

Malware Config

Targets

    • Target

      c788419b6ffbe9fe410ef90a6395afdd_JaffaCakes118

    • Size

      4.7MB

    • MD5

      c788419b6ffbe9fe410ef90a6395afdd

    • SHA1

      146ab901a4e658d0f485d43909aa8cdfb56cb1d3

    • SHA256

      134f2624366cf1b11a72bc7ae194ade3918326264f8031d2c3879e7dc142e011

    • SHA512

      b49914e31a99776fb909bc7b6094ba050f71f4d6e51f85651188110b634d86b8b41dca31a2dbbebcea438d05e3fedbd74997e218289403891124e94ffd8bb791

    • SSDEEP

      98304:Ae4d8iEityhkhqloaxeq7jhIXUvPBnnom2LSqLyi:nCnyhkhBaxem1tPBn2uq3

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks