Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

c81b09c641...18.exe

windows7-x64

7

c81b09c641...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c81b09c641f34447b64a43061aea5700_JaffaCakes118

  • Size

    317KB

  • Sample

    240829-dcc1qssblp

  • MD5

    c81b09c641f34447b64a43061aea5700

  • SHA1

    2c1356f307ffca6b88606985a2d47c32a6d4ecfb

  • SHA256

    192d923057847dcb45535c1216c92115218cd265de335bd284c7cfe7d96d916e

  • SHA512

    28b540f7c08df20cbb8a078fbee1276ab86b390e15b28d90fad8e973e45aaed05ef6113036ca4207e049889e2fd2f3726d8eaa5c77b2a4b124257582cc1fa7a7

  • SSDEEP

    6144:GPSt0zZpuK/KAfKFJSMXkzGVvh3l2PFRxumkt2hENjlvnaG5Y9:uDZp//xyFJSLzGVJ1a3xu5MhENlva/9

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      c81b09c641f34447b64a43061aea5700_JaffaCakes118

    • Size

      317KB

    • MD5

      c81b09c641f34447b64a43061aea5700

    • SHA1

      2c1356f307ffca6b88606985a2d47c32a6d4ecfb

    • SHA256

      192d923057847dcb45535c1216c92115218cd265de335bd284c7cfe7d96d916e

    • SHA512

      28b540f7c08df20cbb8a078fbee1276ab86b390e15b28d90fad8e973e45aaed05ef6113036ca4207e049889e2fd2f3726d8eaa5c77b2a4b124257582cc1fa7a7

    • SSDEEP

      6144:GPSt0zZpuK/KAfKFJSMXkzGVvh3l2PFRxumkt2hENjlvnaG5Y9:uDZp//xyFJSLzGVJ1a3xu5MhENlva/9

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks