Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

IMAGE.exe

windows7-x64

10

IMAGE.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_4888d173e7fbcb3920d7047d158398c13086b365f8473d806d653789be1d80a7

  • Size

    17KB

  • MD5

    edf6b70160d9a7ca0d7f98f4a9b0f6f5

  • SHA1

    533cf2fce7d99d880e645cc20d927116365eb564

  • SHA256

    4888d173e7fbcb3920d7047d158398c13086b365f8473d806d653789be1d80a7

  • SHA512

    47e61587ac45dca9342fd95686847cd6cdfc7254ea7d47f9e9103ec27b44ca2ef9a896b22f4c7965b3dfebb0e637487be2efae7e53c047ecf3270267ea73faf8

  • SSDEEP

    384:hQjnMNT2s2KjaNW0h+8N2CXhnesj/XHgFOBUStM9slTMydS0Kev:q+TF2hW0hwsj/AGtMEcS

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/923874147728232458/ueZK-9vm2atbN4nLZvFSJ_3VaYZFPq7L_XiQMdjB3tIhhJ_eVMiFWiUWekiUfzH_ypmU

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_4888d173e7fbcb3920d7047d158398c13086b365f8473d806d653789be1d80a7
    .zip

    Password: infected

  • IMAGE.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections