Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

71e14a647e...18.exe

windows7-x64

7

71e14a647e...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    71e14a647ebd5f64c5139aba65c249ab_JaffaCakes118

  • Size

    230KB

  • Sample

    240726-ar78msvbpn

  • MD5

    71e14a647ebd5f64c5139aba65c249ab

  • SHA1

    b9cc97dd95eb46a47b858241266e28b800fad05d

  • SHA256

    d2f2a1d991189e017e9d4a4aafedd1561d1c21e57b3843ca603cfaf05ed5648d

  • SHA512

    257c913b5fe6664e09484efb1e248cc032e6a2e6a0ba1a9ed1ac48da02198262a61f2eb1fc5fcf3aa53aa0ae6983408a273fedb4bd581be9b2bfae0e3f2f8c0d

  • SSDEEP

    6144:mL3Bi9KtgY/BLFsr5MgMbmn/go9CHGfarfG0j:mY9RodFOXMbQpMmfarfG0j

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      71e14a647ebd5f64c5139aba65c249ab_JaffaCakes118

    • Size

      230KB

    • MD5

      71e14a647ebd5f64c5139aba65c249ab

    • SHA1

      b9cc97dd95eb46a47b858241266e28b800fad05d

    • SHA256

      d2f2a1d991189e017e9d4a4aafedd1561d1c21e57b3843ca603cfaf05ed5648d

    • SHA512

      257c913b5fe6664e09484efb1e248cc032e6a2e6a0ba1a9ed1ac48da02198262a61f2eb1fc5fcf3aa53aa0ae6983408a273fedb4bd581be9b2bfae0e3f2f8c0d

    • SSDEEP

      6144:mL3Bi9KtgY/BLFsr5MgMbmn/go9CHGfarfG0j:mY9RodFOXMbQpMmfarfG0j

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks