Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8e0686d8e00d106edcaeb3df171f5d90_JaffaCakes118

  • Size

    144KB

  • Sample

    240812-kdcvpashnq

  • MD5

    8e0686d8e00d106edcaeb3df171f5d90

  • SHA1

    1a1b0a5e558dc13061ccdea41bdf5c4d8d19f4d4

  • SHA256

    aada20fc793409485bfd42d0b2f302c415d81f78ca7643be537a66a8549bfbf2

  • SHA512

    759002e0348d5b135f3a138f207ecd06ff0c26ac569894e8afd17e68140c9f89c61ea0523be5c611ae31124a66dab877ef025bd2240c5e1009a014feede7df8f

  • SSDEEP

    3072:kbilLKQnvXvplO5QNGtFjWJzyOELgrm+4/OQH:fhhl0Q4r+yOEjgK

Malware Config

Targets

    • Target

      8e0686d8e00d106edcaeb3df171f5d90_JaffaCakes118

    • Size

      144KB

    • MD5

      8e0686d8e00d106edcaeb3df171f5d90

    • SHA1

      1a1b0a5e558dc13061ccdea41bdf5c4d8d19f4d4

    • SHA256

      aada20fc793409485bfd42d0b2f302c415d81f78ca7643be537a66a8549bfbf2

    • SHA512

      759002e0348d5b135f3a138f207ecd06ff0c26ac569894e8afd17e68140c9f89c61ea0523be5c611ae31124a66dab877ef025bd2240c5e1009a014feede7df8f

    • SSDEEP

      3072:kbilLKQnvXvplO5QNGtFjWJzyOELgrm+4/OQH:fhhl0Q4r+yOEjgK

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks