Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

ebde78d68b...18.exe

windows7-x64

7

ebde78d68b...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ebde78d68bebfdd1de1645e1293406da_JaffaCakes118

  • Size

    339KB

  • Sample

    240410-ym9gxaaa36

  • MD5

    ebde78d68bebfdd1de1645e1293406da

  • SHA1

    f7abb4a99bf93d3161c622b616e5bdbf5d4e2b1c

  • SHA256

    d083226073af407d873224136e2e9a830c48c9a45b3386478a38151f94c80256

  • SHA512

    f9316194a22068587f00b9d619550af6013e34130c9f6d99d21c5d622fa0ef719290d056f1441640c459c07f566e4541eb3b9bf1a36e662e81c095dcff54a50b

  • SSDEEP

    6144:8YA5wVdCy6wrbDY0rDqTWC4zEDzKuTrSbxc97cqaGtQj75Jz1aMVr+V8gH:Ljyy64VrDqTWIzW+9YqaG2BN90V8w

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      ebde78d68bebfdd1de1645e1293406da_JaffaCakes118

    • Size

      339KB

    • MD5

      ebde78d68bebfdd1de1645e1293406da

    • SHA1

      f7abb4a99bf93d3161c622b616e5bdbf5d4e2b1c

    • SHA256

      d083226073af407d873224136e2e9a830c48c9a45b3386478a38151f94c80256

    • SHA512

      f9316194a22068587f00b9d619550af6013e34130c9f6d99d21c5d622fa0ef719290d056f1441640c459c07f566e4541eb3b9bf1a36e662e81c095dcff54a50b

    • SSDEEP

      6144:8YA5wVdCy6wrbDY0rDqTWC4zEDzKuTrSbxc97cqaGtQj75Jz1aMVr+V8gH:Ljyy64VrDqTWIzW+9YqaG2BN90V8w

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks