Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    00ac70c7d287b4ef6341fb5debdaec54_JaffaCakes118

  • Size

    68KB

  • Sample

    240619-1ly1wstajc

  • MD5

    00ac70c7d287b4ef6341fb5debdaec54

  • SHA1

    0a363fd30522f8da4383b3764aa03c00ad4b1d29

  • SHA256

    5740df7b1db21505bd174bcaad5573a927f395315de167eab2775dfffba94144

  • SHA512

    ff5fd6e2917298842bac89352cdaee77625201a4907f079256328835a36916eb75e53596c5b287e6729a1bc79a122e0acccd03dbc85f18ad7bef71a096d12521

  • SSDEEP

    1536:qfYdx0sRnqJb6BGbsV6ToBwMCFW/jqye:qf4x0cnql6BvCoBwMC0jql

Malware Config

Targets

    • Target

      00ac70c7d287b4ef6341fb5debdaec54_JaffaCakes118

    • Size

      68KB

    • MD5

      00ac70c7d287b4ef6341fb5debdaec54

    • SHA1

      0a363fd30522f8da4383b3764aa03c00ad4b1d29

    • SHA256

      5740df7b1db21505bd174bcaad5573a927f395315de167eab2775dfffba94144

    • SHA512

      ff5fd6e2917298842bac89352cdaee77625201a4907f079256328835a36916eb75e53596c5b287e6729a1bc79a122e0acccd03dbc85f18ad7bef71a096d12521

    • SSDEEP

      1536:qfYdx0sRnqJb6BGbsV6ToBwMCFW/jqye:qf4x0cnql6BvCoBwMC0jql

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks