Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2530def488...18.exe

windows7-x64

7

2530def488...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2530def488a99d27c611bc134e1e3934_JaffaCakes118

  • Size

    1.5MB

  • Sample

    241008-zjdrhavcjm

  • MD5

    2530def488a99d27c611bc134e1e3934

  • SHA1

    edd162e96a572b46fbcf8ba22ee21fefcf5bbc13

  • SHA256

    01a96940c20878157aa85abb198f7aa2c211d828bc15e32d5257298bb0635b4b

  • SHA512

    75e67dfdc12e0019b684051ebfa9525135ca6fa9bce8d487ee62dcadb77d073b1da44e09dae301b40a1f839955b75f0ceb016d9e3f8629bb62e91e868c18d0cf

  • SSDEEP

    24576:nhTjcRKZWKxN31yueVCfDdij38ZW2bE95hR4KHGe7cFnohytzMkJcD+PDe:nBcRMvFaPsZW+E9PHH7kohyzJtre

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      2530def488a99d27c611bc134e1e3934_JaffaCakes118

    • Size

      1.5MB

    • MD5

      2530def488a99d27c611bc134e1e3934

    • SHA1

      edd162e96a572b46fbcf8ba22ee21fefcf5bbc13

    • SHA256

      01a96940c20878157aa85abb198f7aa2c211d828bc15e32d5257298bb0635b4b

    • SHA512

      75e67dfdc12e0019b684051ebfa9525135ca6fa9bce8d487ee62dcadb77d073b1da44e09dae301b40a1f839955b75f0ceb016d9e3f8629bb62e91e868c18d0cf

    • SSDEEP

      24576:nhTjcRKZWKxN31yueVCfDdij38ZW2bE95hR4KHGe7cFnohytzMkJcD+PDe:nBcRMvFaPsZW+E9PHH7kohyzJtre

    Score
    7/10
    bootkitdiscoverypersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks