Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

84dedc4621...18.exe

windows7-x64

7

84dedc4621...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    84dedc4621b82b0d5380dd4fe7e1d118_JaffaCakes118

  • Size

    236KB

  • Sample

    240810-fj76ka1ard

  • MD5

    84dedc4621b82b0d5380dd4fe7e1d118

  • SHA1

    94758ad4adc647ed51632a997065a2f02f033166

  • SHA256

    88a7adfdef0d030da047a7a1175d79cf6bd0b657f3f2b3f89db41452909d81b1

  • SHA512

    4550127d7b3d72bed92b974e8a3017b9225cd09641efd5d79877b3403b4a6b41f50eea7c3dca510bf1ecebde997a90ae0ab0d804637c742e20d89adb7e9d4639

  • SSDEEP

    3072:XlELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqsAGat9I97/t7w8ce:03kOMeaavF17EP6qyqsA39I9BfXX

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      84dedc4621b82b0d5380dd4fe7e1d118_JaffaCakes118

    • Size

      236KB

    • MD5

      84dedc4621b82b0d5380dd4fe7e1d118

    • SHA1

      94758ad4adc647ed51632a997065a2f02f033166

    • SHA256

      88a7adfdef0d030da047a7a1175d79cf6bd0b657f3f2b3f89db41452909d81b1

    • SHA512

      4550127d7b3d72bed92b974e8a3017b9225cd09641efd5d79877b3403b4a6b41f50eea7c3dca510bf1ecebde997a90ae0ab0d804637c742e20d89adb7e9d4639

    • SSDEEP

      3072:XlELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqsAGat9I97/t7w8ce:03kOMeaavF17EP6qyqsA39I9BfXX

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks