Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    34f8f2ed1c9a1bf87fb48cb1cc83e17a_JaffaCakes118

  • Size

    2.1MB

  • Sample

    240511-rghnnsba2x

  • MD5

    34f8f2ed1c9a1bf87fb48cb1cc83e17a

  • SHA1

    c9a5367bcd7da5f94b21dea35f1385983d8c2f01

  • SHA256

    5ef97daf9057c4b3f5a9dc9f1d0af7287b248fe113cc4131d6d94e9365b84969

  • SHA512

    ef8adc1ef6c5158ff886e95fe0ebd7f001d5b55b6263a02c9810622e9f29613ae108c7305750ac50f5bfb22e0ef8b8853006e880d5ec095c58b193ea60264623

  • SSDEEP

    24576:UuhayOA2eZJ8NI8NahxAxeZ8DKnxYaXJi2Y3MpbwnCvzb4cbmYdTyVDIL/xL/0Zu:bP8NKexlDkYOMwwnMb4PmyVUL/xL/Gu

Malware Config

Targets

    • Target

      34f8f2ed1c9a1bf87fb48cb1cc83e17a_JaffaCakes118

    • Size

      2.1MB

    • MD5

      34f8f2ed1c9a1bf87fb48cb1cc83e17a

    • SHA1

      c9a5367bcd7da5f94b21dea35f1385983d8c2f01

    • SHA256

      5ef97daf9057c4b3f5a9dc9f1d0af7287b248fe113cc4131d6d94e9365b84969

    • SHA512

      ef8adc1ef6c5158ff886e95fe0ebd7f001d5b55b6263a02c9810622e9f29613ae108c7305750ac50f5bfb22e0ef8b8853006e880d5ec095c58b193ea60264623

    • SSDEEP

      24576:UuhayOA2eZJ8NI8NahxAxeZ8DKnxYaXJi2Y3MpbwnCvzb4cbmYdTyVDIL/xL/0Zu:bP8NKexlDkYOMwwnMb4PmyVUL/xL/Gu

    • Disables service(s)

    • Modifies visibility of file extensions in Explorer

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

    • Sets file execution options in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks