Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

d203e61d81...18.exe

windows7-x64

6

d203e61d81...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d203e61d81ee190e81154fa2939a5875_JaffaCakes118

  • Size

    727KB

  • Sample

    240907-qgxl6awclm

  • MD5

    d203e61d81ee190e81154fa2939a5875

  • SHA1

    72ea05c9258c75c4d83a02feac4daabfdd106455

  • SHA256

    5facfedec540c1335a3e845062b8a06639dd31ea59a9238cf9f3bfdb0f732120

  • SHA512

    4b47ca612dd5e7282bb29622832500809afd63df5d8ec0f4fdaaced46ad59470dc94c68ee1c5c6b932e4a4fd080b793f3218b28214fbd6fe9e2b6a7c9a6a94bf

  • SSDEEP

    12288:DwECaUglPnFsk7P0UahDyDT1xBRXjIjput6kAVuCHO2m:DwEC70qkgUahDuPRvKxO2m

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      d203e61d81ee190e81154fa2939a5875_JaffaCakes118

    • Size

      727KB

    • MD5

      d203e61d81ee190e81154fa2939a5875

    • SHA1

      72ea05c9258c75c4d83a02feac4daabfdd106455

    • SHA256

      5facfedec540c1335a3e845062b8a06639dd31ea59a9238cf9f3bfdb0f732120

    • SHA512

      4b47ca612dd5e7282bb29622832500809afd63df5d8ec0f4fdaaced46ad59470dc94c68ee1c5c6b932e4a4fd080b793f3218b28214fbd6fe9e2b6a7c9a6a94bf

    • SSDEEP

      12288:DwECaUglPnFsk7P0UahDyDT1xBRXjIjput6kAVuCHO2m:DwEC70qkgUahDuPRvKxO2m

    Score
    6/10
    bootkitdiscoverypersistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks