Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

a4c9d3c95e...18.exe

windows7-x64

6

a4c9d3c95e...18.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a4c9d3c95e49171b86528e14b293122c_JaffaCakes118

  • Size

    207KB

  • Sample

    240818-bcllrszbpp

  • MD5

    a4c9d3c95e49171b86528e14b293122c

  • SHA1

    3c47e9fbe915efada773da51dcb3c441b476a71c

  • SHA256

    61fd7c4a7f77f24819424035d32e2e39036f7d8ff010db58c1d67cf74b0d621d

  • SHA512

    6197426b1901eef19c7cb915b4d99d3270b9bb3336d37eaba0fe604c058a0c645893ca21844959e1b3fb621f2cf960ef68db355afd15f282c5eac53af444e2a5

  • SSDEEP

    3072:CqpgyUSD07z8WtoV96HM0XnpvTyQvGn+nCuhTr8npE3dvvq9aGNLlc0/3uEP/+dt:C+gl7zhq4TyQOI5JgpcvqNplcP2lsJm4

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      a4c9d3c95e49171b86528e14b293122c_JaffaCakes118

    • Size

      207KB

    • MD5

      a4c9d3c95e49171b86528e14b293122c

    • SHA1

      3c47e9fbe915efada773da51dcb3c441b476a71c

    • SHA256

      61fd7c4a7f77f24819424035d32e2e39036f7d8ff010db58c1d67cf74b0d621d

    • SHA512

      6197426b1901eef19c7cb915b4d99d3270b9bb3336d37eaba0fe604c058a0c645893ca21844959e1b3fb621f2cf960ef68db355afd15f282c5eac53af444e2a5

    • SSDEEP

      3072:CqpgyUSD07z8WtoV96HM0XnpvTyQvGn+nCuhTr8npE3dvvq9aGNLlc0/3uEP/+dt:C+gl7zhq4TyQOI5JgpcvqNplcP2lsJm4

    Score
    6/10
    bootkitdiscoverypersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks