Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

IMAGE.exe

windows7-x64

10

IMAGE.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_533cf2fce7d99d880e645cc20d927116365eb564

  • Size

    17KB

  • MD5

    edf6b70160d9a7ca0d7f98f4a9b0f6f5

  • SHA1

    533cf2fce7d99d880e645cc20d927116365eb564

  • SHA256

    4888d173e7fbcb3920d7047d158398c13086b365f8473d806d653789be1d80a7

  • SHA512

    47e61587ac45dca9342fd95686847cd6cdfc7254ea7d47f9e9103ec27b44ca2ef9a896b22f4c7965b3dfebb0e637487be2efae7e53c047ecf3270267ea73faf8

  • SSDEEP

    384:hQjnMNT2s2KjaNW0h+8N2CXhnesj/XHgFOBUStM9slTMydS0Kev:q+TF2hW0hwsj/AGtMEcS

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/923874147728232458/ueZK-9vm2atbN4nLZvFSJ_3VaYZFPq7L_XiQMdjB3tIhhJ_eVMiFWiUWekiUfzH_ypmU

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_533cf2fce7d99d880e645cc20d927116365eb564
    .zip

    Password: infected

  • IMAGE.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.