Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f6ea8db7c56caff29d082c81d02772a3_JaffaCakes118

  • Size

    900KB

  • Sample

    240925-1lqphssejc

  • MD5

    f6ea8db7c56caff29d082c81d02772a3

  • SHA1

    401c926756817c2ad429ad046aa13b13378fd759

  • SHA256

    bcaaeec6b79f274d1e408a40f54ebc926f8ad7e121f0f731a072ac3562dd5aa4

  • SHA512

    d4e35c369c7229663398e0d31baccfe01d1ae33a385198e897174b8922c5aeacd77118b9407a9f1b9063d2ce9e6997b17af08cf4fe5222874ab87d2e2b526ebf

  • SSDEEP

    24576:P0is7OBl7ywVmXgHDki0byWFTxOS/IUtc:BcOL7yomXtiO8H

Malware Config

Targets

    • Target

      f6ea8db7c56caff29d082c81d02772a3_JaffaCakes118

    • Size

      900KB

    • MD5

      f6ea8db7c56caff29d082c81d02772a3

    • SHA1

      401c926756817c2ad429ad046aa13b13378fd759

    • SHA256

      bcaaeec6b79f274d1e408a40f54ebc926f8ad7e121f0f731a072ac3562dd5aa4

    • SHA512

      d4e35c369c7229663398e0d31baccfe01d1ae33a385198e897174b8922c5aeacd77118b9407a9f1b9063d2ce9e6997b17af08cf4fe5222874ab87d2e2b526ebf

    • SSDEEP

      24576:P0is7OBl7ywVmXgHDki0byWFTxOS/IUtc:BcOL7yomXtiO8H

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Adds Run key to start application

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks