Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

eac2b245c1...18.exe

windows7-x64

7

eac2b245c1...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eac2b245c17c7aff40175350b6346c7e_JaffaCakes118

  • Size

    242KB

  • Sample

    240919-g8nznavgnm

  • MD5

    eac2b245c17c7aff40175350b6346c7e

  • SHA1

    1f6cbb03337a6f2eee89b7777ce90653670832c3

  • SHA256

    22e0e15a1dcce4f965804423a35ec4debf9cfca8bc6a9359c46d45d14d987a04

  • SHA512

    74b2d66bbb52c2d6c2f0635bf1372f3904ae9691f74421336e04b5e60225698cc0197e1aea0b4df7fedb75e2a67d73b506e14f752dba32dec88394fe74f8eb28

  • SSDEEP

    6144:8keENDvTSn2SV/GuhYdViC7X57+nM4l/XXi5Uc:8NEND/k/GLPX57+n7FSUc

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      eac2b245c17c7aff40175350b6346c7e_JaffaCakes118

    • Size

      242KB

    • MD5

      eac2b245c17c7aff40175350b6346c7e

    • SHA1

      1f6cbb03337a6f2eee89b7777ce90653670832c3

    • SHA256

      22e0e15a1dcce4f965804423a35ec4debf9cfca8bc6a9359c46d45d14d987a04

    • SHA512

      74b2d66bbb52c2d6c2f0635bf1372f3904ae9691f74421336e04b5e60225698cc0197e1aea0b4df7fedb75e2a67d73b506e14f752dba32dec88394fe74f8eb28

    • SSDEEP

      6144:8keENDvTSn2SV/GuhYdViC7X57+nM4l/XXi5Uc:8NEND/k/GLPX57+n7FSUc

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks