Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

JaffaCakes...81.exe

windows7-x64

7

JaffaCakes...81.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_8a55a4606de742c012ad903946faac81

  • Size

    437KB

  • Sample

    250328-fbv62a11gw

  • MD5

    8a55a4606de742c012ad903946faac81

  • SHA1

    5e8d236c2109c7afe37b0cad500ea939998fc45f

  • SHA256

    87f564e5365b16026cda769dd1a4c81ca4cc729f1ec11a2de6a4b8a5bf603568

  • SHA512

    3d8f85e8b9a5833d6836cd0905338dcdf0cf4f77c311905a63530f45b3a4cf060c2451ff2967613975ddd1b6d28039b56798025750723a59e50e8cae6aa30668

  • SSDEEP

    6144:X1b1OBsinPQktNSWN5wZyGZSCvbIyAOYMTwjIVS2i98gWNlPTGQQm6agrdM3SQ:X1CnP/tNSWN0lM45Twj2S2dNtTirdOS

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      JaffaCakes118_8a55a4606de742c012ad903946faac81

    • Size

      437KB

    • MD5

      8a55a4606de742c012ad903946faac81

    • SHA1

      5e8d236c2109c7afe37b0cad500ea939998fc45f

    • SHA256

      87f564e5365b16026cda769dd1a4c81ca4cc729f1ec11a2de6a4b8a5bf603568

    • SHA512

      3d8f85e8b9a5833d6836cd0905338dcdf0cf4f77c311905a63530f45b3a4cf060c2451ff2967613975ddd1b6d28039b56798025750723a59e50e8cae6aa30668

    • SSDEEP

      6144:X1b1OBsinPQktNSWN5wZyGZSCvbIyAOYMTwjIVS2i98gWNlPTGQQm6agrdM3SQ:X1CnP/tNSWN0lM45Twj2S2dNtTirdOS

    Score
    7/10
    bootkitdiscoverypersistence

    • Deletes itself

    • Executes dropped EXE

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks