Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3ebf58b88372969befd563158b0ee074_JaffaCakes118

  • Size

    811KB

  • Sample

    241013-j3z6vawfnd

  • MD5

    3ebf58b88372969befd563158b0ee074

  • SHA1

    4c0199e92347949bc017bac89c5df4fa909f5881

  • SHA256

    d35b7657fbd48ab08b72ffa7b24324c1c9af16dfee8aa6e4789981cb99bb6178

  • SHA512

    1b187976699a1c4cac476e9198b1cbed18a5913c6fc4e32e8bc71f37d5204e92f4f429eac0a1e3751f4e9a9890cdd1cea98ac89d715eb6e6e8fc9bee8a4c9003

  • SSDEEP

    12288:v6PDMWiMRNIz/KSRUstGsyBTpcXn0GgznbSgJUGtOfcphVhRef9eAIoqtH:vkXiueK0UstGsyBTwAqGHVnef9eAGtH

Score
9/10

Malware Config

Targets

    • Target

      3ebf58b88372969befd563158b0ee074_JaffaCakes118

    • Size

      811KB

    • MD5

      3ebf58b88372969befd563158b0ee074

    • SHA1

      4c0199e92347949bc017bac89c5df4fa909f5881

    • SHA256

      d35b7657fbd48ab08b72ffa7b24324c1c9af16dfee8aa6e4789981cb99bb6178

    • SHA512

      1b187976699a1c4cac476e9198b1cbed18a5913c6fc4e32e8bc71f37d5204e92f4f429eac0a1e3751f4e9a9890cdd1cea98ac89d715eb6e6e8fc9bee8a4c9003

    • SSDEEP

      12288:v6PDMWiMRNIz/KSRUstGsyBTpcXn0GgznbSgJUGtOfcphVhRef9eAIoqtH:vkXiueK0UstGsyBTwAqGHVnef9eAGtH

    Score
    9/10
    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

    • Enumerates VirtualBox registry keys

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks