Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09/04/2024, 04:32
Static task
static1
Behavioral task
behavioral1
Sample
e93a6da5faf59525e1439d0883641676_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e93a6da5faf59525e1439d0883641676_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e93a6da5faf59525e1439d0883641676_JaffaCakes118.exe
-
Size
520KB
-
MD5
e93a6da5faf59525e1439d0883641676
-
SHA1
d471a0d5384c7f578ec7a1833667fc1cc902ffc6
-
SHA256
f17bc1a271e9eddc1db8bafcdddeabde6b724dcc4f18305faafcb920d9e31522
-
SHA512
0789074da9ca1f2c47e970367356503f061c5706a1a63d50e9d96c4245de48766d632f7b44b63805e4a1f7903511750ae26abf1a112e6df97b1744c4d3685be4
-
SSDEEP
12288:yjlwQqnhXCc20VLG91CDzguQktq9d6QTQhX3c2myxBThwp:yjlwQqhy0Va91QzgubqHqhnc2pXwp
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 e93a6da5faf59525e1439d0883641676_JaffaCakes118.exe