Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

d1d19f184a...18.exe

windows7-x64

7

d1d19f184a...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d1d19f184a77d3fbd4064f590ea021ed_JaffaCakes118

  • Size

    462KB

  • Sample

    240907-nh42hs1hjk

  • MD5

    d1d19f184a77d3fbd4064f590ea021ed

  • SHA1

    5c8e0977534ef58027b7047d4b970f9da5b2e775

  • SHA256

    c50a92eb2818be453e2d19518b704306eb7acdb409ea482518abfcc968c93647

  • SHA512

    10f2cb246e6a8824a8343b9e64959091b75c097a88e368ecd6353a29914beaa6dbd202e42e29d2cb0e43318efdef57d2adc73d415d53fa876c52f35cc6f942ca

  • SSDEEP

    6144:EARwLb6+lQwWIRlhjRnafyo/6MOEm5jHUktQ2Ap9htVPiniogX/Eaydgo:EfLu4PNRf9aqo/6bEm5zWp9hv6gX/P

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      d1d19f184a77d3fbd4064f590ea021ed_JaffaCakes118

    • Size

      462KB

    • MD5

      d1d19f184a77d3fbd4064f590ea021ed

    • SHA1

      5c8e0977534ef58027b7047d4b970f9da5b2e775

    • SHA256

      c50a92eb2818be453e2d19518b704306eb7acdb409ea482518abfcc968c93647

    • SHA512

      10f2cb246e6a8824a8343b9e64959091b75c097a88e368ecd6353a29914beaa6dbd202e42e29d2cb0e43318efdef57d2adc73d415d53fa876c52f35cc6f942ca

    • SSDEEP

      6144:EARwLb6+lQwWIRlhjRnafyo/6MOEm5jHUktQ2Ap9htVPiniogX/Eaydgo:EfLu4PNRf9aqo/6bEm5zWp9hv6gX/P

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks