Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

dd466c1856...18.exe

windows7-x64

7

dd466c1856...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dd466c1856a777beb0df443d3cf71be2_JaffaCakes118

  • Size

    300KB

  • Sample

    240912-3y6mlssejl

  • MD5

    dd466c1856a777beb0df443d3cf71be2

  • SHA1

    7accb6247e0205ce414a4f4978f6763620c082f2

  • SHA256

    483040b5e8476f18e303ad26e2428f377d72554261dcc85d064fddba980a76fd

  • SHA512

    fa1f84cc0e85af08828ea0a2f5a2cf9dac9e322f43e15051cf4478a0d04d75ef70645396c3b1eabe0220672331530be909a72dca99405fb6b31e9b97dfd0c564

  • SSDEEP

    6144:Vgdizzv/Va6z5hr06Fdpbt5z9lrB4SSo/MX/tXxNJd4J2kX:NVa6z5hFdpZ5XBvSHPtXxrI

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      dd466c1856a777beb0df443d3cf71be2_JaffaCakes118

    • Size

      300KB

    • MD5

      dd466c1856a777beb0df443d3cf71be2

    • SHA1

      7accb6247e0205ce414a4f4978f6763620c082f2

    • SHA256

      483040b5e8476f18e303ad26e2428f377d72554261dcc85d064fddba980a76fd

    • SHA512

      fa1f84cc0e85af08828ea0a2f5a2cf9dac9e322f43e15051cf4478a0d04d75ef70645396c3b1eabe0220672331530be909a72dca99405fb6b31e9b97dfd0c564

    • SSDEEP

      6144:Vgdizzv/Va6z5hr06Fdpbt5z9lrB4SSo/MX/tXxNJd4J2kX:NVa6z5hFdpZ5XBvSHPtXxrI

    Score
    7/10
    bootkitdiscoverypersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks