Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    241646da8d3683db3a178185b3c4393c_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240508-krs4tscc91

  • MD5

    241646da8d3683db3a178185b3c4393c

  • SHA1

    1a5957ebb198ff50abefeb6ea80711f0adff4baf

  • SHA256

    71d5a0bfb2ff28fc679ba3efb0cf21bd662678a142b975097efa8849f321027d

  • SHA512

    d286ac69e5e469ac9167358abcd2934cda855cd57246440aae9bb0b1eb5700c293cf5fa0a9b1e4ee70bf9fe7c10a9f97d9ddd137313cd2ae99f6de01ef99c9a6

  • SSDEEP

    12288:RFfwcHcu8pMkZ3Fn9d+Vd3SUZ+7EeI1x7f7V3+hT6DaRWz58kc+1xy8SyGL4P:RJcu8pl9d+VdCUhN1SsNK+1pSyq4P

Score
10/10

Malware Config

Targets

    • Target

      241646da8d3683db3a178185b3c4393c_JaffaCakes118

    • Size

      1.9MB

    • MD5

      241646da8d3683db3a178185b3c4393c

    • SHA1

      1a5957ebb198ff50abefeb6ea80711f0adff4baf

    • SHA256

      71d5a0bfb2ff28fc679ba3efb0cf21bd662678a142b975097efa8849f321027d

    • SHA512

      d286ac69e5e469ac9167358abcd2934cda855cd57246440aae9bb0b1eb5700c293cf5fa0a9b1e4ee70bf9fe7c10a9f97d9ddd137313cd2ae99f6de01ef99c9a6

    • SSDEEP

      12288:RFfwcHcu8pMkZ3Fn9d+Vd3SUZ+7EeI1x7f7V3+hT6DaRWz58kc+1xy8SyGL4P:RJcu8pl9d+VdCUhN1SsNK+1pSyq4P

    Score
    10/10
    • Modifies WinLogon for persistence

    • Adds policy Run key to start application

    • Modifies Installed Components in the registry

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies WinLogon

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks