Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a4c9d3c95e49171b86528e14b293122c_JaffaCakes118
-
Size
207KB
-
Sample
240818-bcllrszbpp
-
MD5
a4c9d3c95e49171b86528e14b293122c
-
SHA1
3c47e9fbe915efada773da51dcb3c441b476a71c
-
SHA256
61fd7c4a7f77f24819424035d32e2e39036f7d8ff010db58c1d67cf74b0d621d
-
SHA512
6197426b1901eef19c7cb915b4d99d3270b9bb3336d37eaba0fe604c058a0c645893ca21844959e1b3fb621f2cf960ef68db355afd15f282c5eac53af444e2a5
-
SSDEEP
3072:CqpgyUSD07z8WtoV96HM0XnpvTyQvGn+nCuhTr8npE3dvvq9aGNLlc0/3uEP/+dt:C+gl7zhq4TyQOI5JgpcvqNplcP2lsJm4
Static task
static1
Behavioral task
behavioral1
Sample
a4c9d3c95e49171b86528e14b293122c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a4c9d3c95e49171b86528e14b293122c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
a4c9d3c95e49171b86528e14b293122c_JaffaCakes118
-
Size
207KB
-
MD5
a4c9d3c95e49171b86528e14b293122c
-
SHA1
3c47e9fbe915efada773da51dcb3c441b476a71c
-
SHA256
61fd7c4a7f77f24819424035d32e2e39036f7d8ff010db58c1d67cf74b0d621d
-
SHA512
6197426b1901eef19c7cb915b4d99d3270b9bb3336d37eaba0fe604c058a0c645893ca21844959e1b3fb621f2cf960ef68db355afd15f282c5eac53af444e2a5
-
SSDEEP
3072:CqpgyUSD07z8WtoV96HM0XnpvTyQvGn+nCuhTr8npE3dvvq9aGNLlc0/3uEP/+dt:C+gl7zhq4TyQOI5JgpcvqNplcP2lsJm4
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of SetThreadContext
-