Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

dca47f293a...18.exe

windows7-x64

7

dca47f293a...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dca47f293a3bc9a5c03327de99f67363_JaffaCakes118

  • Size

    561KB

  • Sample

    240912-vbh9ssthpq

  • MD5

    dca47f293a3bc9a5c03327de99f67363

  • SHA1

    e27bd9c0c7fb84fff352f0b3d28ab53e12eef799

  • SHA256

    78d172ebc5d763acc7a033d697b704dfafa7f3355391652541efffc9597e987b

  • SHA512

    b42453854301b55591df1fb39c52cb826ae8cf355721206306d4a6568f8a06c8723b39c29f4772745663a83c1ab4f2a29f0afe8bed937ea76380c969f7e7005d

  • SSDEEP

    12288:jpXTRQxjT/rZKcGApHz3e7qlcDii/4TNWMedID72GE20M:jpjRMTNK6pLbi4TaIKM

Score
7/10
defense_evasiondiscoveryvmprotect

Malware Config

Targets

    • Target

      dca47f293a3bc9a5c03327de99f67363_JaffaCakes118

    • Size

      561KB

    • MD5

      dca47f293a3bc9a5c03327de99f67363

    • SHA1

      e27bd9c0c7fb84fff352f0b3d28ab53e12eef799

    • SHA256

      78d172ebc5d763acc7a033d697b704dfafa7f3355391652541efffc9597e987b

    • SHA512

      b42453854301b55591df1fb39c52cb826ae8cf355721206306d4a6568f8a06c8723b39c29f4772745663a83c1ab4f2a29f0afe8bed937ea76380c969f7e7005d

    • SSDEEP

      12288:jpXTRQxjT/rZKcGApHz3e7qlcDii/4TNWMedID72GE20M:jpjRMTNK6pLbi4TaIKM

    Score
    7/10
    defense_evasiondiscoveryvmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks