Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

8aeda848a2...18.exe

windows7-x64

7

8aeda848a2...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8aeda848a2f87d5115d55d488589de1f_JaffaCakes118

  • Size

    431KB

  • Sample

    240811-s1mmeazemd

  • MD5

    8aeda848a2f87d5115d55d488589de1f

  • SHA1

    8962817136dbccdb6e7c8e0201569df71c5f1ab2

  • SHA256

    2f8cae913d5e6e8560911a24f48a05e078559eec2fe88394a8517d492979e691

  • SHA512

    ce5529785a5cf07c2332ad08cd1aeecbee72b499ff65e7f5bd44eb16d6a9d2aa73cf801faeccb1881cccd6e8f05967984110c2b3fe691cf223ff3847d6458e98

  • SSDEEP

    6144:sMkSc2bG4iNbXIcmgVHr6gBCCe5dl3j+IsBX7Ag3eTb:YSc21KUcmvCe5dlT2BX7ADP

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      8aeda848a2f87d5115d55d488589de1f_JaffaCakes118

    • Size

      431KB

    • MD5

      8aeda848a2f87d5115d55d488589de1f

    • SHA1

      8962817136dbccdb6e7c8e0201569df71c5f1ab2

    • SHA256

      2f8cae913d5e6e8560911a24f48a05e078559eec2fe88394a8517d492979e691

    • SHA512

      ce5529785a5cf07c2332ad08cd1aeecbee72b499ff65e7f5bd44eb16d6a9d2aa73cf801faeccb1881cccd6e8f05967984110c2b3fe691cf223ff3847d6458e98

    • SSDEEP

      6144:sMkSc2bG4iNbXIcmgVHr6gBCCe5dl3j+IsBX7Ag3eTb:YSc21KUcmvCe5dlT2BX7ADP

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks