Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a560af0210323a31168d429d3119c537_JaffaCakes118

  • Size

    212KB

  • Sample

    240818-e2g7esvgma

  • MD5

    a560af0210323a31168d429d3119c537

  • SHA1

    6eb2fdb03753ee11062c172d67bc00c3e9df24e7

  • SHA256

    b65547d07b72348c6ac229b68c8d1589d8f1bb1f5e7b9ece582f63432af03554

  • SHA512

    7df6dc8a405ac4b645229200a574b5116635b925dc4c5360d9dc15f2c72cf602775ce7c406bc175498ca8e041a01993a58eae4da05ade37accb41f7801c95197

  • SSDEEP

    6144:syeD+mpa0pGaj2JgT5NuItvS7RGaJ/rgj7WpyN5PElXd:Xeimpa0pzjD9Icvy/67WpyNot

Malware Config

Targets

    • Target

      a560af0210323a31168d429d3119c537_JaffaCakes118

    • Size

      212KB

    • MD5

      a560af0210323a31168d429d3119c537

    • SHA1

      6eb2fdb03753ee11062c172d67bc00c3e9df24e7

    • SHA256

      b65547d07b72348c6ac229b68c8d1589d8f1bb1f5e7b9ece582f63432af03554

    • SHA512

      7df6dc8a405ac4b645229200a574b5116635b925dc4c5360d9dc15f2c72cf602775ce7c406bc175498ca8e041a01993a58eae4da05ade37accb41f7801c95197

    • SSDEEP

      6144:syeD+mpa0pGaj2JgT5NuItvS7RGaJ/rgj7WpyN5PElXd:Xeimpa0pzjD9Icvy/67WpyNot

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks