Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    792cce64d9a7bcab34074a46d08413df_JaffaCakes118

  • Size

    1.8MB

  • Sample

    240527-pr3qgscc3y

  • MD5

    792cce64d9a7bcab34074a46d08413df

  • SHA1

    443b8f14a89af1abe5701dbaff8b54a050619239

  • SHA256

    f055b7d2deeed14b16bac2b565c8664e641a5601b1087b71cd8bc847d6578f3c

  • SHA512

    435c5d2aa2c1791dbf622046eeb9dc2ab55062d2b8e869b8a57fee7529dfaf9aca242d7dea0c9037b5556099bd5636f762be78beda2a78d2acecc1c2e2d39eac

  • SSDEEP

    24576:UuhatOieZJ8NI8DerQZb+md4wmWO2OieZJ8NI8DerQZb+md4wmWO0MA:b98DerQZbd2X8DerQZbd22

Malware Config

Targets

    • Target

      792cce64d9a7bcab34074a46d08413df_JaffaCakes118

    • Size

      1.8MB

    • MD5

      792cce64d9a7bcab34074a46d08413df

    • SHA1

      443b8f14a89af1abe5701dbaff8b54a050619239

    • SHA256

      f055b7d2deeed14b16bac2b565c8664e641a5601b1087b71cd8bc847d6578f3c

    • SHA512

      435c5d2aa2c1791dbf622046eeb9dc2ab55062d2b8e869b8a57fee7529dfaf9aca242d7dea0c9037b5556099bd5636f762be78beda2a78d2acecc1c2e2d39eac

    • SSDEEP

      24576:UuhatOieZJ8NI8DerQZb+md4wmWO2OieZJ8NI8DerQZb+md4wmWO0MA:b98DerQZbd2X8DerQZbd22

    • Disables service(s)

    • Modifies visibility of file extensions in Explorer

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

    • Sets file execution options in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks