Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

36195d9173...18.exe

windows7-x64

6

36195d9173...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    36195d91732cf5ecabfa5a248b9d6013_JaffaCakes118

  • Size

    392KB

  • Sample

    240710-ybpclawelq

  • MD5

    36195d91732cf5ecabfa5a248b9d6013

  • SHA1

    bcf21c4972665a2ccc3ff8a26fa3d0b85d16dc40

  • SHA256

    e37bda84d2233ec0752e855f7cb98cde22819608fc19764243330e9ac15f26fd

  • SHA512

    b88a14702aa7f597211458fa03713e413e97a767f54bc70bd5e22a0610c697841ceaea9958935697d7ecf95dc628a37ceb49594f6ce6196e8cd09ee3a455216d

  • SSDEEP

    12288:SOaiVsT8GzCSnT+P4cxaVyLmg/Ts974Lp:dJZ+CSn2aELTs98Lp

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      36195d91732cf5ecabfa5a248b9d6013_JaffaCakes118

    • Size

      392KB

    • MD5

      36195d91732cf5ecabfa5a248b9d6013

    • SHA1

      bcf21c4972665a2ccc3ff8a26fa3d0b85d16dc40

    • SHA256

      e37bda84d2233ec0752e855f7cb98cde22819608fc19764243330e9ac15f26fd

    • SHA512

      b88a14702aa7f597211458fa03713e413e97a767f54bc70bd5e22a0610c697841ceaea9958935697d7ecf95dc628a37ceb49594f6ce6196e8cd09ee3a455216d

    • SSDEEP

      12288:SOaiVsT8GzCSnT+P4cxaVyLmg/Ts974Lp:dJZ+CSn2aELTs98Lp

    Score
    6/10
    bootkitpersistence

    • Adds Run key to start application

      persistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks