Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

f6ea8db7c5...18.exe

windows7-x64

7

f6ea8db7c5...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f6ea8db7c56caff29d082c81d02772a3_JaffaCakes118

  • Size

    900KB

  • Sample

    240925-1lqphssejc

  • MD5

    f6ea8db7c56caff29d082c81d02772a3

  • SHA1

    401c926756817c2ad429ad046aa13b13378fd759

  • SHA256

    bcaaeec6b79f274d1e408a40f54ebc926f8ad7e121f0f731a072ac3562dd5aa4

  • SHA512

    d4e35c369c7229663398e0d31baccfe01d1ae33a385198e897174b8922c5aeacd77118b9407a9f1b9063d2ce9e6997b17af08cf4fe5222874ab87d2e2b526ebf

  • SSDEEP

    24576:P0is7OBl7ywVmXgHDki0byWFTxOS/IUtc:BcOL7yomXtiO8H

Score
7/10
discoveryevasionpersistencethemida

Malware Config

Targets

    • Target

      f6ea8db7c56caff29d082c81d02772a3_JaffaCakes118

    • Size

      900KB

    • MD5

      f6ea8db7c56caff29d082c81d02772a3

    • SHA1

      401c926756817c2ad429ad046aa13b13378fd759

    • SHA256

      bcaaeec6b79f274d1e408a40f54ebc926f8ad7e121f0f731a072ac3562dd5aa4

    • SHA512

      d4e35c369c7229663398e0d31baccfe01d1ae33a385198e897174b8922c5aeacd77118b9407a9f1b9063d2ce9e6997b17af08cf4fe5222874ab87d2e2b526ebf

    • SSDEEP

      24576:P0is7OBl7ywVmXgHDki0byWFTxOS/IUtc:BcOL7yomXtiO8H

    Score
    7/10
    discoveryevasionpersistencethemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks