Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c20ba488f338182af6591ae4b92280b6_JaffaCakes118
-
Size
1.4MB
-
Sample
240826-b9e59azdrm
-
MD5
c20ba488f338182af6591ae4b92280b6
-
SHA1
6389d14ddc02284bd1eb128cce788b72060f2f91
-
SHA256
a6acda54c2268a3fda4d7afafab5a7e600846f856b582ed224230f983d266eea
-
SHA512
c8b817936055ec8128f2f4567220d8dd1af9790a49ebbb518e57328b7325433cb21b04c8206698ea2dd0ab890b2fe4dc6840c8acae680df23bb3874a625b9869
-
SSDEEP
24576:t8UpE7WjSq7WjS70bISMFSRx+SILin5QxhNQ7lck+MHPY9LXfmsXpV2jr1VT7g+l:tH+WjS6WjS7KdvIW5Qxk+xJXxWjr1xnl
Static task
static1
Behavioral task
behavioral1
Sample
c20ba488f338182af6591ae4b92280b6_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c20ba488f338182af6591ae4b92280b6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
c20ba488f338182af6591ae4b92280b6_JaffaCakes118
-
Size
1.4MB
-
MD5
c20ba488f338182af6591ae4b92280b6
-
SHA1
6389d14ddc02284bd1eb128cce788b72060f2f91
-
SHA256
a6acda54c2268a3fda4d7afafab5a7e600846f856b582ed224230f983d266eea
-
SHA512
c8b817936055ec8128f2f4567220d8dd1af9790a49ebbb518e57328b7325433cb21b04c8206698ea2dd0ab890b2fe4dc6840c8acae680df23bb3874a625b9869
-
SSDEEP
24576:t8UpE7WjSq7WjS70bISMFSRx+SILin5QxhNQ7lck+MHPY9LXfmsXpV2jr1VT7g+l:tH+WjS6WjS7KdvIW5Qxk+xJXxWjr1xnl
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-