Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

0c7c5c3780...18.exe

windows7-x64

7

0c7c5c3780...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0c7c5c37800bcae4ddb21052534536f2_JaffaCakes118

  • Size

    228KB

  • Sample

    240625-ev1p7atckk

  • MD5

    0c7c5c37800bcae4ddb21052534536f2

  • SHA1

    3744f5039ea7ca7b5bd9f6f8b2987563cbecf273

  • SHA256

    3bb3339a6f67518705eed4add738a74611032c22305efe283ab28e3ecef7966e

  • SHA512

    c90cd21a6c8e999ae2f96730d706be394985786e391c5f5b9c31e56deb657a66e639b73d6fe088cdce7cec5f20776288e74cd5d4a04870972991715fbdd2a13e

  • SSDEEP

    3072:pq4fCvsC3wYW36k0ZC/CzDZ7KT93Znc5rS5DbLsklqO8joUxpWXM6B3m3GFkW:pOZ3wfD0ZB/oTRZnA2JfsEqcSWclykW

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      0c7c5c37800bcae4ddb21052534536f2_JaffaCakes118

    • Size

      228KB

    • MD5

      0c7c5c37800bcae4ddb21052534536f2

    • SHA1

      3744f5039ea7ca7b5bd9f6f8b2987563cbecf273

    • SHA256

      3bb3339a6f67518705eed4add738a74611032c22305efe283ab28e3ecef7966e

    • SHA512

      c90cd21a6c8e999ae2f96730d706be394985786e391c5f5b9c31e56deb657a66e639b73d6fe088cdce7cec5f20776288e74cd5d4a04870972991715fbdd2a13e

    • SSDEEP

      3072:pq4fCvsC3wYW36k0ZC/CzDZ7KT93Znc5rS5DbLsklqO8joUxpWXM6B3m3GFkW:pOZ3wfD0ZB/oTRZnA2JfsEqcSWclykW

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks