Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d48a8290a1f0214560433a9bdc89968e_JaffaCakes118

  • Size

    723KB

  • Sample

    240908-rgqpaasemd

  • MD5

    d48a8290a1f0214560433a9bdc89968e

  • SHA1

    375fd3636f5d612b61eeeca70b1b115479bd7525

  • SHA256

    5ea4ad84ae401331d0fc64afe5b6290db06c443669fbde5264645b7b9c5bfe56

  • SHA512

    be4a67e5fbf17775d2d3c7697826df046defe75ee55e0a3a7bd2aab9e821af67fbca7fe0a8b52230adc624c60ff83cbbc08cd493831f6fd01caf1525d439e8b6

  • SSDEEP

    12288:IkmAqNhBrYvg6QiEDCyxDdy0OBRXjIjbLyxUPZnYd:IN5Bv6QiEjJy0gRWVZnYd

Malware Config

Targets

    • Target

      d48a8290a1f0214560433a9bdc89968e_JaffaCakes118

    • Size

      723KB

    • MD5

      d48a8290a1f0214560433a9bdc89968e

    • SHA1

      375fd3636f5d612b61eeeca70b1b115479bd7525

    • SHA256

      5ea4ad84ae401331d0fc64afe5b6290db06c443669fbde5264645b7b9c5bfe56

    • SHA512

      be4a67e5fbf17775d2d3c7697826df046defe75ee55e0a3a7bd2aab9e821af67fbca7fe0a8b52230adc624c60ff83cbbc08cd493831f6fd01caf1525d439e8b6

    • SSDEEP

      12288:IkmAqNhBrYvg6QiEDCyxDdy0OBRXjIjbLyxUPZnYd:IN5Bv6QiEjJy0gRWVZnYd

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks