Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bdeae0db47216ff68d46763fe6cab9f8_JaffaCakes118
-
Size
96KB
-
Sample
240824-febxkavhrr
-
MD5
bdeae0db47216ff68d46763fe6cab9f8
-
SHA1
b8f1fe96444e83c1a48497c7469c04ed5e9c7787
-
SHA256
023d3b4d9ccb843ceb8e367ae2dd2a84a7d9834bdcc2dac60a112f10eb4ad189
-
SHA512
bf825dd542f62c1fe6ec688940812d46bbb4aa72c394e53017e90871044dc457675f9d9baf377d04a9b176c967a108e6225ffc0df8f6933710785f2519c5d0a4
-
SSDEEP
1536:xhFusSx9qYMhdFHS8qdydo3nTzhYxJA+CwNUtBZVY9v8pr5lqiOaN:x3S4jHS8q/3nTzePCwNUh4E95l8aN
Static task
static1
Behavioral task
behavioral1
Sample
bdeae0db47216ff68d46763fe6cab9f8_JaffaCakes118.exe
Resource
win7-20240705-en
Malware Config
Targets
-
-
Target
bdeae0db47216ff68d46763fe6cab9f8_JaffaCakes118
-
Size
96KB
-
MD5
bdeae0db47216ff68d46763fe6cab9f8
-
SHA1
b8f1fe96444e83c1a48497c7469c04ed5e9c7787
-
SHA256
023d3b4d9ccb843ceb8e367ae2dd2a84a7d9834bdcc2dac60a112f10eb4ad189
-
SHA512
bf825dd542f62c1fe6ec688940812d46bbb4aa72c394e53017e90871044dc457675f9d9baf377d04a9b176c967a108e6225ffc0df8f6933710785f2519c5d0a4
-
SSDEEP
1536:xhFusSx9qYMhdFHS8qdydo3nTzhYxJA+CwNUtBZVY9v8pr5lqiOaN:x3S4jHS8q/3nTzePCwNUh4E95l8aN
Score10/10-
Gh0st RAT payload
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-