Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
86cd700435b6d540cda08d8acab5e9da_JaffaCakes118
-
Size
203KB
-
Sample
240810-tyslba1grc
-
MD5
86cd700435b6d540cda08d8acab5e9da
-
SHA1
821626a14912fc3fd33b095cf24abcec91b1240f
-
SHA256
148fa65b723bbcaed2a5aaaa0a685f966d292a581146fbd1abd5a9a951d54c0a
-
SHA512
c57807ed96fbbb725decf32991cefab239431eec65c814fa527fa4d1791ff208e1c390cb0b7a8a6b39ecefcd440dba35facfa9426a3202b43a267353ca6f066b
-
SSDEEP
3072:whGJR3yV3O8CYdhyp5s2KoNPu56NuzdYSTnjFb3uqAlUMxqRj3geDakJbppGbfeZ:pR3ke8NEZrBxEYAjFbejlRMDaGzh
Behavioral task
behavioral1
Sample
86cd700435b6d540cda08d8acab5e9da_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
86cd700435b6d540cda08d8acab5e9da_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
86cd700435b6d540cda08d8acab5e9da_JaffaCakes118
-
Size
203KB
-
MD5
86cd700435b6d540cda08d8acab5e9da
-
SHA1
821626a14912fc3fd33b095cf24abcec91b1240f
-
SHA256
148fa65b723bbcaed2a5aaaa0a685f966d292a581146fbd1abd5a9a951d54c0a
-
SHA512
c57807ed96fbbb725decf32991cefab239431eec65c814fa527fa4d1791ff208e1c390cb0b7a8a6b39ecefcd440dba35facfa9426a3202b43a267353ca6f066b
-
SSDEEP
3072:whGJR3yV3O8CYdhyp5s2KoNPu56NuzdYSTnjFb3uqAlUMxqRj3geDakJbppGbfeZ:pR3ke8NEZrBxEYAjFbejlRMDaGzh
Score7/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Modify Registry
1Pre-OS Boot
1Bootkit
1Subvert Trust Controls
1Install Root Certificate
1