Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a931fdaa75ef6f53e20c7427aedb087c_JaffaCakes118
-
Size
466KB
-
Sample
240819-crmm2ssdqp
-
MD5
a931fdaa75ef6f53e20c7427aedb087c
-
SHA1
764df4f114aa151ecfb8c350a6ebd989024dcaab
-
SHA256
102b5f04002fac3d7073690e6ecc138eeef78b364f9fa4e5b6f8a6d1a207bfbd
-
SHA512
792c1aa94cdd40e5e3966267ec4ff0459ab00d89e536b1e8d68dd3827a6a5739531dc4f856ef67a9acf591b8bb1ada5cd11b1aa697180d9a85e5e5b01029aa83
-
SSDEEP
6144:vvJzbbugYZX7TO19vnEV/j0VyCHHieRA2QOCnzbwKJnToQ3vxKJ/:vvJzvleXG3vsz9WQOCn3dJnhxY
Behavioral task
behavioral1
Sample
a931fdaa75ef6f53e20c7427aedb087c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a931fdaa75ef6f53e20c7427aedb087c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
a931fdaa75ef6f53e20c7427aedb087c_JaffaCakes118
-
Size
466KB
-
MD5
a931fdaa75ef6f53e20c7427aedb087c
-
SHA1
764df4f114aa151ecfb8c350a6ebd989024dcaab
-
SHA256
102b5f04002fac3d7073690e6ecc138eeef78b364f9fa4e5b6f8a6d1a207bfbd
-
SHA512
792c1aa94cdd40e5e3966267ec4ff0459ab00d89e536b1e8d68dd3827a6a5739531dc4f856ef67a9acf591b8bb1ada5cd11b1aa697180d9a85e5e5b01029aa83
-
SSDEEP
6144:vvJzbbugYZX7TO19vnEV/j0VyCHHieRA2QOCnzbwKJnToQ3vxKJ/:vvJzvleXG3vsz9WQOCn3dJnhxY
Score7/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-