Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

21a7780a2d...18.exe

windows7-x64

7

21a7780a2d...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21a7780a2dfc5d43598844aadc98f086_JaffaCakes118

  • Size

    462KB

  • Sample

    240703-j2364sxhqm

  • MD5

    21a7780a2dfc5d43598844aadc98f086

  • SHA1

    4ddd3fc4d654e23a711719ab0ef4c0a56b8c84bd

  • SHA256

    9570ade31c42b68115f8c25695cf1b59ae6dac06a093e7ac5f74ed2adb15d420

  • SHA512

    fe18d0882e20995a7162f4faa8496d0c1de5dce24ad37c4f3ca7ea4874ef95b6fdfeada1108434f6e9a56fcc998eb5a5d69e857a4bd07753b95235190d9e9228

  • SSDEEP

    6144:HxXpZwjBBe9PcLYNQ7lBv9hvHfjPWOtlHOjv0ud/NXFvHyqYzvzcP2PYJc3S:HRpujBBedN+Tv9JPlHOjvBhN1vBLkS

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      21a7780a2dfc5d43598844aadc98f086_JaffaCakes118

    • Size

      462KB

    • MD5

      21a7780a2dfc5d43598844aadc98f086

    • SHA1

      4ddd3fc4d654e23a711719ab0ef4c0a56b8c84bd

    • SHA256

      9570ade31c42b68115f8c25695cf1b59ae6dac06a093e7ac5f74ed2adb15d420

    • SHA512

      fe18d0882e20995a7162f4faa8496d0c1de5dce24ad37c4f3ca7ea4874ef95b6fdfeada1108434f6e9a56fcc998eb5a5d69e857a4bd07753b95235190d9e9228

    • SSDEEP

      6144:HxXpZwjBBe9PcLYNQ7lBv9hvHfjPWOtlHOjv0ud/NXFvHyqYzvzcP2PYJc3S:HRpujBBedN+Tv9JPlHOjvBhN1vBLkS

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks