Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

a13649815e...18.exe

windows7-x64

10

a13649815e...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a13649815e9792abf139875f03fe1e7b_JaffaCakes118

  • Size

    44KB

  • Sample

    240817-e585baxdnd

  • MD5

    a13649815e9792abf139875f03fe1e7b

  • SHA1

    c3b40e87893ae6dac045c10ac401528d28b767f7

  • SHA256

    2b4df35eda74a9f451226cd2b323808803adcc3788587f9de7307058e5fa3cb7

  • SHA512

    e924f60965db437c522079f2b7ab430d447310a134a0b335c9307103516d21b7b42691f4e6ba6ecf9105e552d963d85dbb65ae75706304b2aafb7bb2dbff3e9e

  • SSDEEP

    768:nhdPT33ZkuSdzL+XwFlVY/qCYJxhJGroZNeGMwTpnoSQoBGbF5HhD8zT/xQxCIEm:nDPquSdzQwFYSCYJxkoZNOwloSXBGbFJ

Score
10/10
bootkitdiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      a13649815e9792abf139875f03fe1e7b_JaffaCakes118

    • Size

      44KB

    • MD5

      a13649815e9792abf139875f03fe1e7b

    • SHA1

      c3b40e87893ae6dac045c10ac401528d28b767f7

    • SHA256

      2b4df35eda74a9f451226cd2b323808803adcc3788587f9de7307058e5fa3cb7

    • SHA512

      e924f60965db437c522079f2b7ab430d447310a134a0b335c9307103516d21b7b42691f4e6ba6ecf9105e552d963d85dbb65ae75706304b2aafb7bb2dbff3e9e

    • SSDEEP

      768:nhdPT33ZkuSdzL+XwFlVY/qCYJxhJGroZNeGMwTpnoSQoBGbF5HhD8zT/xQxCIEm:nDPquSdzQwFYSCYJxkoZNOwloSXBGbFJ

    Score
    10/10
    bootkitdiscoverypersistencespywarestealer

    • Modifies WinLogon for persistence

      persistence

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks