Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
26fcf83d99878c8832a7a195b2aeef4b_JaffaCakes118
-
Size
236KB
-
Sample
240705-sdp41szhnn
-
MD5
26fcf83d99878c8832a7a195b2aeef4b
-
SHA1
f8d58508ef3afacee13b69b80d51d2727c330622
-
SHA256
1630dc10cb379af9df5b33c1caafaab9b6b6de66d02a079cd67eadd4fbca1e4d
-
SHA512
fb4943ca5e12582dfd8626df4bcb742c635b748daccc10fb2861ed4e19de17cef5ca04a80979584791f1aeb6a35d4965b466b0413b363d9a33ed846dcb0e478e
-
SSDEEP
3072:3lELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqshBXaL+16KxjWylD:U3kOMeaavF17EP6qyqshtaL0HJXwV+N
Behavioral task
behavioral1
Sample
26fcf83d99878c8832a7a195b2aeef4b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
26fcf83d99878c8832a7a195b2aeef4b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
26fcf83d99878c8832a7a195b2aeef4b_JaffaCakes118
-
Size
236KB
-
MD5
26fcf83d99878c8832a7a195b2aeef4b
-
SHA1
f8d58508ef3afacee13b69b80d51d2727c330622
-
SHA256
1630dc10cb379af9df5b33c1caafaab9b6b6de66d02a079cd67eadd4fbca1e4d
-
SHA512
fb4943ca5e12582dfd8626df4bcb742c635b748daccc10fb2861ed4e19de17cef5ca04a80979584791f1aeb6a35d4965b466b0413b363d9a33ed846dcb0e478e
-
SSDEEP
3072:3lELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqshBXaL+16KxjWylD:U3kOMeaavF17EP6qyqshtaL0HJXwV+N
Score7/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-