Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

2a9e729be0...18.exe

windows7-x64

9

2a9e729be0...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a9e729be05bec6a2c27c49c358a3022_JaffaCakes118

  • Size

    531KB

  • Sample

    241009-esmesayhra

  • MD5

    2a9e729be05bec6a2c27c49c358a3022

  • SHA1

    6a144bb0fe73952f8a0b5f14a36ca6f369ab2806

  • SHA256

    9ce35697bd6a676741fc14093e313928396b52d971361f41b445fc1fa9649552

  • SHA512

    6b14e56bc65a889f63544f38fd38dcbbc91c1d0b5d6e55f89a4c961b989038378e6796429dab6ccab94703520df0b056346d6b9edf3b0fdbad2ecae27e3bb8df

  • SSDEEP

    12288:cnnxNXTHxigTCQbJUMHON1qAhN/QVIvHipk+cmsW:cnnxhAgTV6MHON1qqNYCP+x3

Score
9/10
discoveryevasion

Malware Config

Targets

    • Target

      2a9e729be05bec6a2c27c49c358a3022_JaffaCakes118

    • Size

      531KB

    • MD5

      2a9e729be05bec6a2c27c49c358a3022

    • SHA1

      6a144bb0fe73952f8a0b5f14a36ca6f369ab2806

    • SHA256

      9ce35697bd6a676741fc14093e313928396b52d971361f41b445fc1fa9649552

    • SHA512

      6b14e56bc65a889f63544f38fd38dcbbc91c1d0b5d6e55f89a4c961b989038378e6796429dab6ccab94703520df0b056346d6b9edf3b0fdbad2ecae27e3bb8df

    • SSDEEP

      12288:cnnxNXTHxigTCQbJUMHON1qAhN/QVIvHipk+cmsW:cnnxhAgTV6MHON1qqNYCP+x3

    Score
    9/10
    discoveryevasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks