Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0f5074e66bbba5f002bc6c852562b171_JaffaCakes118
-
Size
493KB
-
Sample
240503-bes4mabb2t
-
MD5
0f5074e66bbba5f002bc6c852562b171
-
SHA1
ab6c443832ab331bcd7c8ad69b79660c92db5020
-
SHA256
e68de82944fe3452fa4b33999cab64b9295c9fa294147a4ca0451da3ecbd9822
-
SHA512
1272c296917c2f01f59f13b3096afefaf4e7fba2e093b1472fead755a197ff42824087df8acb2959f4c16bb09d42153899fd1e9dc7da498c97d8ffa7e9708059
-
SSDEEP
6144:PIJ/N5GXadtcJeUth55C+pvCAcRcCmAH4ttI/wonOSgy19ZWZKUlxfsfkA52nRK:wf5GKEgUycvCcCN/wZGWZ5l8l2nU
Static task
static1
Behavioral task
behavioral1
Sample
0f5074e66bbba5f002bc6c852562b171_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0f5074e66bbba5f002bc6c852562b171_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
0f5074e66bbba5f002bc6c852562b171_JaffaCakes118
-
Size
493KB
-
MD5
0f5074e66bbba5f002bc6c852562b171
-
SHA1
ab6c443832ab331bcd7c8ad69b79660c92db5020
-
SHA256
e68de82944fe3452fa4b33999cab64b9295c9fa294147a4ca0451da3ecbd9822
-
SHA512
1272c296917c2f01f59f13b3096afefaf4e7fba2e093b1472fead755a197ff42824087df8acb2959f4c16bb09d42153899fd1e9dc7da498c97d8ffa7e9708059
-
SSDEEP
6144:PIJ/N5GXadtcJeUth55C+pvCAcRcCmAH4ttI/wonOSgy19ZWZKUlxfsfkA52nRK:wf5GKEgUycvCcCN/wZGWZ5l8l2nU
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-