Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

f5f9c8087b...18.exe

windows7-x64

8

f5f9c8087b...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f5f9c8087b84746c9ddce270a11286be_JaffaCakes118

  • Size

    158KB

  • Sample

    240925-n92epsthnn

  • MD5

    f5f9c8087b84746c9ddce270a11286be

  • SHA1

    253a9e2564c345d0e4dabb2bb5cfe2e86ca5ee14

  • SHA256

    daa81f795893bb6d8c9159ad6a8420bd7bd9bd9a31c6bd40213602fef28dd1d1

  • SHA512

    0d275fa8095e9744a7047d4b4f9b5f7b74fc2519e40d11b916044365a2ff3a1ab08bcc152e954a4942736857098cbe5484958d4605dea8a50a7c28eae03fbee2

  • SSDEEP

    3072:cdq0eTGVmHbLOuJcW7wYfhD8FkiZOMt8/rrwWoQ4y:cdq0YGI7LBJ/wyOFkik/r0WoQ

Score
8/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      f5f9c8087b84746c9ddce270a11286be_JaffaCakes118

    • Size

      158KB

    • MD5

      f5f9c8087b84746c9ddce270a11286be

    • SHA1

      253a9e2564c345d0e4dabb2bb5cfe2e86ca5ee14

    • SHA256

      daa81f795893bb6d8c9159ad6a8420bd7bd9bd9a31c6bd40213602fef28dd1d1

    • SHA512

      0d275fa8095e9744a7047d4b4f9b5f7b74fc2519e40d11b916044365a2ff3a1ab08bcc152e954a4942736857098cbe5484958d4605dea8a50a7c28eae03fbee2

    • SSDEEP

      3072:cdq0eTGVmHbLOuJcW7wYfhD8FkiZOMt8/rrwWoQ4y:cdq0YGI7LBJ/wyOFkik/r0WoQ

    Score
    8/10
    bootkitdiscoverypersistence

    • Drops file in Drivers directory

    • Server Software Component: Terminal Services DLL

      persistence

    • Deletes itself

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks