Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

1959f3d00c...18.exe

windows7-x64

7

1959f3d00c...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1959f3d00cd5574584fbd36f623b2efb_JaffaCakes118

  • Size

    470KB

  • Sample

    240628-jqyr9aydjb

  • MD5

    1959f3d00cd5574584fbd36f623b2efb

  • SHA1

    79c4173d1244b223bb6ce35f50d66772b56a8acf

  • SHA256

    58cc20718bfce361be73df53dcd284973b2d8a60e95ef014699b7520d03b0e1e

  • SHA512

    877c95d954b05529f00853107cdd26d886cd0aebb571bfab97e781bff95a5aaf6c6d9a1963bd6f3598892ea244a82d65d681daa219e4c603fccb31fbd6970c24

  • SSDEEP

    6144:aW8jOyTnFNYcMjvb6s06y3IHkD8PObZJ282FZzc4fdydV+nyyMrDQmd2ZlQ08:aW1sFNZ3fBrbZE8WzFnwl2ZlX8

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      1959f3d00cd5574584fbd36f623b2efb_JaffaCakes118

    • Size

      470KB

    • MD5

      1959f3d00cd5574584fbd36f623b2efb

    • SHA1

      79c4173d1244b223bb6ce35f50d66772b56a8acf

    • SHA256

      58cc20718bfce361be73df53dcd284973b2d8a60e95ef014699b7520d03b0e1e

    • SHA512

      877c95d954b05529f00853107cdd26d886cd0aebb571bfab97e781bff95a5aaf6c6d9a1963bd6f3598892ea244a82d65d681daa219e4c603fccb31fbd6970c24

    • SSDEEP

      6144:aW8jOyTnFNYcMjvb6s06y3IHkD8PObZJ282FZzc4fdydV+nyyMrDQmd2ZlQ08:aW1sFNZ3fBrbZE8WzFnwl2ZlX8

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks