Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bd286f56db4328fe1d561433ee632483_JaffaCakes118
-
Size
241KB
-
Sample
240823-zxx3aswfle
-
MD5
bd286f56db4328fe1d561433ee632483
-
SHA1
ac3cbf770d4ee5532b215800288811fa5b78d3e4
-
SHA256
07de69422a85fe182eb969821d60ddf2e77e9fbfdccb82e5f91b3b0e9220c63d
-
SHA512
3633963d47d7a26deb6a99b030b73d0b17ba791f8e3c292664f7e2198f2cba47746bb04f62f55b5d5a97395b599227c3c44f052d6c3b70f5e1c27030d700f1be
-
SSDEEP
6144:0keENDvTSn2SV/GuhYdViC7X57+nMGv3/xhKif0n8iY:0NEND/k/GLPX57+nRvvxoifYfY
Behavioral task
behavioral1
Sample
bd286f56db4328fe1d561433ee632483_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bd286f56db4328fe1d561433ee632483_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
bd286f56db4328fe1d561433ee632483_JaffaCakes118
-
Size
241KB
-
MD5
bd286f56db4328fe1d561433ee632483
-
SHA1
ac3cbf770d4ee5532b215800288811fa5b78d3e4
-
SHA256
07de69422a85fe182eb969821d60ddf2e77e9fbfdccb82e5f91b3b0e9220c63d
-
SHA512
3633963d47d7a26deb6a99b030b73d0b17ba791f8e3c292664f7e2198f2cba47746bb04f62f55b5d5a97395b599227c3c44f052d6c3b70f5e1c27030d700f1be
-
SSDEEP
6144:0keENDvTSn2SV/GuhYdViC7X57+nMGv3/xhKif0n8iY:0NEND/k/GLPX57+nRvvxoifYfY
Score7/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Modify Registry
1Pre-OS Boot
1Bootkit
1Subvert Trust Controls
1Install Root Certificate
1