Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
37c90b223266839f2bd1d857968248ad_JaffaCakes118
-
Size
234KB
-
Sample
240512-cz5tlafd44
-
MD5
37c90b223266839f2bd1d857968248ad
-
SHA1
5aa80d64abea48916ee404ce1068f546bfaca43a
-
SHA256
7e4fff4af0626025912656296147d2501b1409bd006e15b567d23312416aac12
-
SHA512
71bed080f4fd19d13a48e58b4cf0a8260e41131e14c66b9ebf2392cc4296a353969e51ae081a2b9d1d9e904e4132269b951d1a4c6e4f9770d3273777a71f9da7
-
SSDEEP
768:cJjSO7E4+l8raRcW8XJk/GLr1Ep+GtAO1yJ/EDufyXCMg3Q1RU:wW4+ayaZk/GLr1e+Gv1yJ/Emg5g3ya
Malware Config
Targets
-
-
Target
37c90b223266839f2bd1d857968248ad_JaffaCakes118
-
Size
234KB
-
MD5
37c90b223266839f2bd1d857968248ad
-
SHA1
5aa80d64abea48916ee404ce1068f546bfaca43a
-
SHA256
7e4fff4af0626025912656296147d2501b1409bd006e15b567d23312416aac12
-
SHA512
71bed080f4fd19d13a48e58b4cf0a8260e41131e14c66b9ebf2392cc4296a353969e51ae081a2b9d1d9e904e4132269b951d1a4c6e4f9770d3273777a71f9da7
-
SSDEEP
768:cJjSO7E4+l8raRcW8XJk/GLr1Ep+GtAO1yJ/EDufyXCMg3Q1RU:wW4+ayaZk/GLr1e+Gv1yJ/Emg5g3ya
Score10/10-
Modifies WinLogon for persistence
-
UAC bypass
-
Disables Task Manager via registry modification
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1