Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

a6f401a3c5...18.exe

windows7-x64

6

a6f401a3c5...18.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a6f401a3c5bb9139eafbf6aa1f16d8ab_JaffaCakes118

  • Size

    675KB

  • Sample

    240818-rfn43azdql

  • MD5

    a6f401a3c5bb9139eafbf6aa1f16d8ab

  • SHA1

    0064470764732f5ae3cd2759f870072858fc1c09

  • SHA256

    5f183148a689ece3c844dcdd4f28de1cb3b4c68729054969c790106891410d19

  • SHA512

    2588868e056e1106d5811635e546db45dd7ce92007e3ee0ab1b53421f1ef979243de4bfe389798f77878d4ffb5b49bdc6e9f9938b8155a469bcd5673177aa75b

  • SSDEEP

    12288:ipvgWIBv0OXA89bn6b7MP+Dd2Y1tq0DQ49sApCpj1P9XkGbgf:imWQ0t7MP+h2YpUOBpuPxpbgf

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      a6f401a3c5bb9139eafbf6aa1f16d8ab_JaffaCakes118

    • Size

      675KB

    • MD5

      a6f401a3c5bb9139eafbf6aa1f16d8ab

    • SHA1

      0064470764732f5ae3cd2759f870072858fc1c09

    • SHA256

      5f183148a689ece3c844dcdd4f28de1cb3b4c68729054969c790106891410d19

    • SHA512

      2588868e056e1106d5811635e546db45dd7ce92007e3ee0ab1b53421f1ef979243de4bfe389798f77878d4ffb5b49bdc6e9f9938b8155a469bcd5673177aa75b

    • SSDEEP

      12288:ipvgWIBv0OXA89bn6b7MP+Dd2Y1tq0DQ49sApCpj1P9XkGbgf:imWQ0t7MP+h2YpUOBpuPxpbgf

    Score
    6/10
    bootkitdiscoverypersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks