Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    dc293f77f7da9c6d4e31afc42fa23781_JaffaCakes118

  • Size

    236KB

  • Sample

    240912-ld1ges1blj

  • MD5

    dc293f77f7da9c6d4e31afc42fa23781

  • SHA1

    d4f658600721250a197659e157577ded74df4243

  • SHA256

    114748bc3200bc9fe75577a836aaa92471e619c7391db17193f182ccf16ddcc5

  • SHA512

    bccdddb417869d31f5a4b683f0afd0ee3c476261aa3ca3bb3564385261fba059dd8d74ef20ae02f7c623377b261322e32d7524ccd74a0098639ce0bf8e149f0b

  • SSDEEP

    6144:703XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBf/1n6QFjCRW:7c1udnLSg03ymK2Ilm1F4a4kp1n6QFAW

Malware Config

Targets

    • Target

      dc293f77f7da9c6d4e31afc42fa23781_JaffaCakes118

    • Size

      236KB

    • MD5

      dc293f77f7da9c6d4e31afc42fa23781

    • SHA1

      d4f658600721250a197659e157577ded74df4243

    • SHA256

      114748bc3200bc9fe75577a836aaa92471e619c7391db17193f182ccf16ddcc5

    • SHA512

      bccdddb417869d31f5a4b683f0afd0ee3c476261aa3ca3bb3564385261fba059dd8d74ef20ae02f7c623377b261322e32d7524ccd74a0098639ce0bf8e149f0b

    • SSDEEP

      6144:703XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBf/1n6QFjCRW:7c1udnLSg03ymK2Ilm1F4a4kp1n6QFAW

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks