Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
241646da8d3683db3a178185b3c4393c_JaffaCakes118
-
Size
1.9MB
-
Sample
240508-krs4tscc91
-
MD5
241646da8d3683db3a178185b3c4393c
-
SHA1
1a5957ebb198ff50abefeb6ea80711f0adff4baf
-
SHA256
71d5a0bfb2ff28fc679ba3efb0cf21bd662678a142b975097efa8849f321027d
-
SHA512
d286ac69e5e469ac9167358abcd2934cda855cd57246440aae9bb0b1eb5700c293cf5fa0a9b1e4ee70bf9fe7c10a9f97d9ddd137313cd2ae99f6de01ef99c9a6
-
SSDEEP
12288:RFfwcHcu8pMkZ3Fn9d+Vd3SUZ+7EeI1x7f7V3+hT6DaRWz58kc+1xy8SyGL4P:RJcu8pl9d+VdCUhN1SsNK+1pSyq4P
Static task
static1
Behavioral task
behavioral1
Sample
241646da8d3683db3a178185b3c4393c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
241646da8d3683db3a178185b3c4393c_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
241646da8d3683db3a178185b3c4393c_JaffaCakes118
-
Size
1.9MB
-
MD5
241646da8d3683db3a178185b3c4393c
-
SHA1
1a5957ebb198ff50abefeb6ea80711f0adff4baf
-
SHA256
71d5a0bfb2ff28fc679ba3efb0cf21bd662678a142b975097efa8849f321027d
-
SHA512
d286ac69e5e469ac9167358abcd2934cda855cd57246440aae9bb0b1eb5700c293cf5fa0a9b1e4ee70bf9fe7c10a9f97d9ddd137313cd2ae99f6de01ef99c9a6
-
SSDEEP
12288:RFfwcHcu8pMkZ3Fn9d+Vd3SUZ+7EeI1x7f7V3+hT6DaRWz58kc+1xy8SyGL4P:RJcu8pl9d+VdCUhN1SsNK+1pSyq4P
Score10/10-
Modifies WinLogon for persistence
-
Adds policy Run key to start application
-
Modifies Installed Components in the registry
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies WinLogon
-
Drops file in System32 directory
-