Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

c15eeb848d...18.exe

windows7-x64

10

c15eeb848d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c15eeb848d230e98f13ac3287e4e4916_JaffaCakes118

  • Size

    664KB

  • Sample

    240825-xlqsqs1cpk

  • MD5

    c15eeb848d230e98f13ac3287e4e4916

  • SHA1

    d8f86e0f9cf3f899cf0a47809032e8afbf1b68b6

  • SHA256

    7245a682dc36a935bea6b6f28595e9f77c06ae2f61aee4bc3032ff3976097503

  • SHA512

    cf9750db73f185818ba8a75a055c2d8137a9733858e06ed8a278a759fd878b4ac630ff28cabbc2dc455fbfdac2f357294494ab80b0e9878a49671e1b907ef722

  • SSDEEP

    12288:pDUe7v5RR/+YvID93ot1eQqZcR//BwUS+/CRTAoaj:yeLzR/+a6ot1efZcd/+LRTAz

Score
10/10
bootkitdiscoveryevasionpersistence

Malware Config

Targets

    • Target

      c15eeb848d230e98f13ac3287e4e4916_JaffaCakes118

    • Size

      664KB

    • MD5

      c15eeb848d230e98f13ac3287e4e4916

    • SHA1

      d8f86e0f9cf3f899cf0a47809032e8afbf1b68b6

    • SHA256

      7245a682dc36a935bea6b6f28595e9f77c06ae2f61aee4bc3032ff3976097503

    • SHA512

      cf9750db73f185818ba8a75a055c2d8137a9733858e06ed8a278a759fd878b4ac630ff28cabbc2dc455fbfdac2f357294494ab80b0e9878a49671e1b907ef722

    • SSDEEP

      12288:pDUe7v5RR/+YvID93ot1eQqZcR//BwUS+/CRTAoaj:yeLzR/+a6ot1efZcd/+LRTAz

    Score
    10/10
    bootkitdiscoveryevasionpersistence

    • Modifies firewall policy service

      evasion

    • Adds policy Run key to start application

      persistence

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Adds Run key to start application

      persistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks