Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

046eb23b6b...18.exe

windows7-x64

7

046eb23b6b...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    046eb23b6ba272a21b2af4fbfe15cb6a_JaffaCakes118

  • Size

    468KB

  • Sample

    240620-kmclaayckb

  • MD5

    046eb23b6ba272a21b2af4fbfe15cb6a

  • SHA1

    4fe7cad8a03f92bedd17b3694aafb85263cedf46

  • SHA256

    1a65216bbb849a0828b62210938dc72818197b5e8b8c25b9c1cbae73ec71b571

  • SHA512

    a7f680c4d7dff3bb417ce7bf580051f52e7b72c4dca96be5fe23a664478da177ac2f01ca6125e2a0ae8b46635d647af32802f268a7131904fc9d34e3f7b7d416

  • SSDEEP

    12288:bb7jkD3v0VBRxE5MBGlcM7UdTsi7UZWG1j3FLiUhf:bb3w3v8BRqEM7UdnU1j35iI

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      046eb23b6ba272a21b2af4fbfe15cb6a_JaffaCakes118

    • Size

      468KB

    • MD5

      046eb23b6ba272a21b2af4fbfe15cb6a

    • SHA1

      4fe7cad8a03f92bedd17b3694aafb85263cedf46

    • SHA256

      1a65216bbb849a0828b62210938dc72818197b5e8b8c25b9c1cbae73ec71b571

    • SHA512

      a7f680c4d7dff3bb417ce7bf580051f52e7b72c4dca96be5fe23a664478da177ac2f01ca6125e2a0ae8b46635d647af32802f268a7131904fc9d34e3f7b7d416

    • SSDEEP

      12288:bb7jkD3v0VBRxE5MBGlcM7UdTsi7UZWG1j3FLiUhf:bb3w3v8BRqEM7UdnU1j35iI

    Score
    7/10
    bootkitpersistence

    • Deletes itself

    • Executes dropped EXE

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks