Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4bb9f080262fc5eb2480704ce3847bbd_JaffaCakes118

  • Size

    202KB

  • Sample

    240715-2m8r6avhnb

  • MD5

    4bb9f080262fc5eb2480704ce3847bbd

  • SHA1

    d33d281433040d2dd2f4daa29a70f56cd9b3dbd5

  • SHA256

    41a350f01107b9759552630130aaabe7d913238b9855183996f18c554725522f

  • SHA512

    1eb48f712a6d1d02543b5658e8fcbf58f815612dd49f4ac07f6538c0f88a64cadae1d4bafb93494aec80713f9c207aa2485f83acd4cfe18965494ea7b82fede0

  • SSDEEP

    6144:i0YhjwuTT396HSjGT7UZ5SPzcxt49cUMfm:YhjfTTHBkc48m

Malware Config

Targets

    • Target

      4bb9f080262fc5eb2480704ce3847bbd_JaffaCakes118

    • Size

      202KB

    • MD5

      4bb9f080262fc5eb2480704ce3847bbd

    • SHA1

      d33d281433040d2dd2f4daa29a70f56cd9b3dbd5

    • SHA256

      41a350f01107b9759552630130aaabe7d913238b9855183996f18c554725522f

    • SHA512

      1eb48f712a6d1d02543b5658e8fcbf58f815612dd49f4ac07f6538c0f88a64cadae1d4bafb93494aec80713f9c207aa2485f83acd4cfe18965494ea7b82fede0

    • SSDEEP

      6144:i0YhjwuTT396HSjGT7UZ5SPzcxt49cUMfm:YhjfTTHBkc48m

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks