Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

ac628d225f...18.exe

windows7-x64

7

ac628d225f...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac628d225f349cda36e79435b638973a_JaffaCakes118

  • Size

    205KB

  • Sample

    240819-ysd8ysxckr

  • MD5

    ac628d225f349cda36e79435b638973a

  • SHA1

    353dee1960ccac6c37cc679c6d750476a8c19f51

  • SHA256

    ce290947566ec0d43cfdfb1595786b55725b9af643f31f8dd57b8f2da6ea10e1

  • SHA512

    a744c2c4a9ecda2bd23df6056168a5d1111f05845547def7657a438e63207fe8da04a2725c055e3f2708ecb639bb0d76ef8ce846ebd6e8675fd2f9331d910f7f

  • SSDEEP

    6144:v0hfPqsPFbrBLAxNIKgUgk16yrN64vcpvPW:v0hVPKvlgny8acW

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      ac628d225f349cda36e79435b638973a_JaffaCakes118

    • Size

      205KB

    • MD5

      ac628d225f349cda36e79435b638973a

    • SHA1

      353dee1960ccac6c37cc679c6d750476a8c19f51

    • SHA256

      ce290947566ec0d43cfdfb1595786b55725b9af643f31f8dd57b8f2da6ea10e1

    • SHA512

      a744c2c4a9ecda2bd23df6056168a5d1111f05845547def7657a438e63207fe8da04a2725c055e3f2708ecb639bb0d76ef8ce846ebd6e8675fd2f9331d910f7f

    • SSDEEP

      6144:v0hfPqsPFbrBLAxNIKgUgk16yrN64vcpvPW:v0hVPKvlgny8acW

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks