Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d48a8290a1f0214560433a9bdc89968e_JaffaCakes118
-
Size
723KB
-
Sample
240908-rgqpaasemd
-
MD5
d48a8290a1f0214560433a9bdc89968e
-
SHA1
375fd3636f5d612b61eeeca70b1b115479bd7525
-
SHA256
5ea4ad84ae401331d0fc64afe5b6290db06c443669fbde5264645b7b9c5bfe56
-
SHA512
be4a67e5fbf17775d2d3c7697826df046defe75ee55e0a3a7bd2aab9e821af67fbca7fe0a8b52230adc624c60ff83cbbc08cd493831f6fd01caf1525d439e8b6
-
SSDEEP
12288:IkmAqNhBrYvg6QiEDCyxDdy0OBRXjIjbLyxUPZnYd:IN5Bv6QiEjJy0gRWVZnYd
Static task
static1
Behavioral task
behavioral1
Sample
d48a8290a1f0214560433a9bdc89968e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d48a8290a1f0214560433a9bdc89968e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
d48a8290a1f0214560433a9bdc89968e_JaffaCakes118
-
Size
723KB
-
MD5
d48a8290a1f0214560433a9bdc89968e
-
SHA1
375fd3636f5d612b61eeeca70b1b115479bd7525
-
SHA256
5ea4ad84ae401331d0fc64afe5b6290db06c443669fbde5264645b7b9c5bfe56
-
SHA512
be4a67e5fbf17775d2d3c7697826df046defe75ee55e0a3a7bd2aab9e821af67fbca7fe0a8b52230adc624c60ff83cbbc08cd493831f6fd01caf1525d439e8b6
-
SSDEEP
12288:IkmAqNhBrYvg6QiEDCyxDdy0OBRXjIjbLyxUPZnYd:IN5Bv6QiEjJy0gRWVZnYd
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-