Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_8a9149aba98e057c077a47eb52aeffda

  • Size

    858KB

  • Sample

    250328-l88fhswpy5

  • MD5

    8a9149aba98e057c077a47eb52aeffda

  • SHA1

    8252f2b8227fad0675fd9e94f78866b483c9bf54

  • SHA256

    22b858137cbe7161f4c3fd8be5a582d94937a7fa0fc63bffccddfa54e952ff77

  • SHA512

    1db94bc24fe04ad7fdd1d1edb9a2faed635da4c2cdb15149f443eb904bb95d6d990decec6c97a4afcaeb19a87b19d63ae0fbf85817995dad66a2163f84b68576

  • SSDEEP

    24576:JY/1R5xRXO/eyD6weEy/v+IccnMasElghJa:JYzY/fsDvIcnDqhs

Malware Config

Targets

    • Target

      JaffaCakes118_8a9149aba98e057c077a47eb52aeffda

    • Size

      858KB

    • MD5

      8a9149aba98e057c077a47eb52aeffda

    • SHA1

      8252f2b8227fad0675fd9e94f78866b483c9bf54

    • SHA256

      22b858137cbe7161f4c3fd8be5a582d94937a7fa0fc63bffccddfa54e952ff77

    • SHA512

      1db94bc24fe04ad7fdd1d1edb9a2faed635da4c2cdb15149f443eb904bb95d6d990decec6c97a4afcaeb19a87b19d63ae0fbf85817995dad66a2163f84b68576

    • SSDEEP

      24576:JY/1R5xRXO/eyD6weEy/v+IccnMasElghJa:JYzY/fsDvIcnDqhs

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks