Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

94b121e1a9...18.exe

windows7-x64

7

94b121e1a9...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    94b121e1a9f2b13be6097ef00f23d68d_JaffaCakes118

  • Size

    479KB

  • Sample

    240813-zphyeazfql

  • MD5

    94b121e1a9f2b13be6097ef00f23d68d

  • SHA1

    03935be2b57e27e652ab211dd2ce7d38cadb8fd2

  • SHA256

    1d5d8c51b77a3d48869c0d1a8cc407113917f60ecc6f710cb187d5b08a658b87

  • SHA512

    0d396a7e44760c7f53b417174652f2a7524ff0bde1466a4f1bbe1e02350f9567a3652c0f45d4c57b01a46d0353b691a0eddd729c4e7e18045fc6aee5973baa20

  • SSDEEP

    6144:cbi2G5iJFMsYFkY8ryjIHUaKCoFMow3Sx6G2Q4oJu2XBKn+I3dyXAV:X22iJi1ryqZMoue6PvIZBK+I3dyXM

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      94b121e1a9f2b13be6097ef00f23d68d_JaffaCakes118

    • Size

      479KB

    • MD5

      94b121e1a9f2b13be6097ef00f23d68d

    • SHA1

      03935be2b57e27e652ab211dd2ce7d38cadb8fd2

    • SHA256

      1d5d8c51b77a3d48869c0d1a8cc407113917f60ecc6f710cb187d5b08a658b87

    • SHA512

      0d396a7e44760c7f53b417174652f2a7524ff0bde1466a4f1bbe1e02350f9567a3652c0f45d4c57b01a46d0353b691a0eddd729c4e7e18045fc6aee5973baa20

    • SSDEEP

      6144:cbi2G5iJFMsYFkY8ryjIHUaKCoFMow3Sx6G2Q4oJu2XBKn+I3dyXAV:X22iJi1ryqZMoue6PvIZBK+I3dyXM

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks