Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
00272215bd6a708e07303fe89389a0ca_JaffaCakes118
-
Size
108KB
-
Sample
240619-x8ph7asfpk
-
MD5
00272215bd6a708e07303fe89389a0ca
-
SHA1
1dbf97874e136622b53626fc873c6be61cfeb68d
-
SHA256
9851c47533375fda4b3b4f9f56a757c058b5bb523d4f45c53119e19fa67012ae
-
SHA512
54125fa36c9e15eb9c05bc995c5cd8d2793d729f068765264b745a10672702434a68438fcfebe71129eecb8ab1656b7c67d8e16368f3b551b72a4385c94a1846
-
SSDEEP
3072:8Xcln5I8S+0bEwsmEWpJsn8d4womj00gT:KE5IGQEwsmEQeE4/uq
Static task
static1
Behavioral task
behavioral1
Sample
00272215bd6a708e07303fe89389a0ca_JaffaCakes118.exe
Resource
win7-20240419-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
00272215bd6a708e07303fe89389a0ca_JaffaCakes118
-
Size
108KB
-
MD5
00272215bd6a708e07303fe89389a0ca
-
SHA1
1dbf97874e136622b53626fc873c6be61cfeb68d
-
SHA256
9851c47533375fda4b3b4f9f56a757c058b5bb523d4f45c53119e19fa67012ae
-
SHA512
54125fa36c9e15eb9c05bc995c5cd8d2793d729f068765264b745a10672702434a68438fcfebe71129eecb8ab1656b7c67d8e16368f3b551b72a4385c94a1846
-
SSDEEP
3072:8Xcln5I8S+0bEwsmEWpJsn8d4womj00gT:KE5IGQEwsmEQeE4/uq
-
Modifies firewall policy service
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1