Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

8955121d75...18.exe

windows7-x64

7

8955121d75...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8955121d75fbf95f7c14c8ae3424728f_JaffaCakes118

  • Size

    194KB

  • Sample

    240811-g58jwssejh

  • MD5

    8955121d75fbf95f7c14c8ae3424728f

  • SHA1

    f1ab1d96d9ed177b6f129bc51bc0db5ad4316dca

  • SHA256

    973eeee5560ad3c4771f6d469841a5fd807da356e1aed53fcb162e53d781f506

  • SHA512

    285374ca9ec66c26703c401fee5fec951ed155b2c3fd6bd940315c2113456923849e262193940a443b2b02031c96aebc50b9d7bdaaf1554a8100aa623b6a2ab2

  • SSDEEP

    3072:9Z6r8aaxBbOIdbOpqSfX6K83/GzJn6TdLr0GVJ3O+pgfD7NxXgkLN3U:H6YhbiIdoqSvz8vSnURe+u3NxXfLpU

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      8955121d75fbf95f7c14c8ae3424728f_JaffaCakes118

    • Size

      194KB

    • MD5

      8955121d75fbf95f7c14c8ae3424728f

    • SHA1

      f1ab1d96d9ed177b6f129bc51bc0db5ad4316dca

    • SHA256

      973eeee5560ad3c4771f6d469841a5fd807da356e1aed53fcb162e53d781f506

    • SHA512

      285374ca9ec66c26703c401fee5fec951ed155b2c3fd6bd940315c2113456923849e262193940a443b2b02031c96aebc50b9d7bdaaf1554a8100aa623b6a2ab2

    • SSDEEP

      3072:9Z6r8aaxBbOIdbOpqSfX6K83/GzJn6TdLr0GVJ3O+pgfD7NxXgkLN3U:H6YhbiIdoqSvz8vSnURe+u3NxXfLpU

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks