Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    60063b23f25783654a863ed3f9da3e92_JaffaCakes118

  • Size

    218KB

  • Sample

    240720-l1sebsxblq

  • MD5

    60063b23f25783654a863ed3f9da3e92

  • SHA1

    0e072fb6b5823bfd57fe8a32d9f1406761a2f49f

  • SHA256

    dc9995412fccfda2df7a0591c3e772dc483530a208f6064560b07c5b17c0bdfa

  • SHA512

    8c0291124da5502c6fef49b3312cf8165fab918e793b61529392846e1a1343934f7d320d6b21b8a0e611c21a5b612e6d163cdce8ea5853ce3a06fc1bc2f63fd9

  • SSDEEP

    6144:cQ2E205qRTe5uht1lIJTgUl4epYz4QwTC:c1N0IJeI1yd7py4bTC

Malware Config

Targets

    • Target

      60063b23f25783654a863ed3f9da3e92_JaffaCakes118

    • Size

      218KB

    • MD5

      60063b23f25783654a863ed3f9da3e92

    • SHA1

      0e072fb6b5823bfd57fe8a32d9f1406761a2f49f

    • SHA256

      dc9995412fccfda2df7a0591c3e772dc483530a208f6064560b07c5b17c0bdfa

    • SHA512

      8c0291124da5502c6fef49b3312cf8165fab918e793b61529392846e1a1343934f7d320d6b21b8a0e611c21a5b612e6d163cdce8ea5853ce3a06fc1bc2f63fd9

    • SSDEEP

      6144:cQ2E205qRTe5uht1lIJTgUl4epYz4QwTC:c1N0IJeI1yd7py4bTC

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks