Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

6048c9f37d...18.exe

windows7-x64

7

6048c9f37d...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6048c9f37d8ba86f3e5643931e310d59_JaffaCakes118

  • Size

    241KB

  • Sample

    240720-2pm88s1ajl

  • MD5

    6048c9f37d8ba86f3e5643931e310d59

  • SHA1

    c8b82e0892e09072163d00c4e9e9a0ca5a204d4b

  • SHA256

    d39f6466fba4e7bca1c082c2caa0d9e4ceb0be4d2c2d7c37e4a2eed7e25c81c0

  • SHA512

    c5b69a086e1504f9dc5f3e60dd16eb83fc614a6929015bb173637edf5731a66c061d397bd15978019544d5c26ae347ba77501ae23eb040e35ca8c7e8d3bb2ca1

  • SSDEEP

    6144:2keENDvTSn2SV/GuhYdViC7X57+nMO742yRg7KQ60VQ:2NEND/k/GLPX57+n8PRg7G0VQ

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      6048c9f37d8ba86f3e5643931e310d59_JaffaCakes118

    • Size

      241KB

    • MD5

      6048c9f37d8ba86f3e5643931e310d59

    • SHA1

      c8b82e0892e09072163d00c4e9e9a0ca5a204d4b

    • SHA256

      d39f6466fba4e7bca1c082c2caa0d9e4ceb0be4d2c2d7c37e4a2eed7e25c81c0

    • SHA512

      c5b69a086e1504f9dc5f3e60dd16eb83fc614a6929015bb173637edf5731a66c061d397bd15978019544d5c26ae347ba77501ae23eb040e35ca8c7e8d3bb2ca1

    • SSDEEP

      6144:2keENDvTSn2SV/GuhYdViC7X57+nMO742yRg7KQ60VQ:2NEND/k/GLPX57+n8PRg7G0VQ

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks