Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
00017806adfd7100f845bd5ae38f9344_JaffaCakes118
-
Size
23KB
-
Sample
240619-xapfjawdrg
-
MD5
00017806adfd7100f845bd5ae38f9344
-
SHA1
86f5bfcb8efd17031c42f8a833bb3d09e6f2d1f1
-
SHA256
2d46535a274f3553877b4250829d759fe3b8fbccc121ccc85ba6576c5b58b954
-
SHA512
0de0160e4c436bfe8d67222b5ed2a8a29c2f16d3dbba1bf6e27b910754043fe7700baa9908fa1fd31ea1d8273f52cccb7bd1106ced8eb830e8dc4c1271ec8d5e
-
SSDEEP
384:xPyZNjtU2mzQBz22XBVvNZiAtnCjx/PEQROY4zEiEVbg/zy:pyZ66TfUAgx/7ROYYEiE1g/O
Static task
static1
Behavioral task
behavioral1
Sample
00017806adfd7100f845bd5ae38f9344_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
00017806adfd7100f845bd5ae38f9344_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
00017806adfd7100f845bd5ae38f9344_JaffaCakes118
-
Size
23KB
-
MD5
00017806adfd7100f845bd5ae38f9344
-
SHA1
86f5bfcb8efd17031c42f8a833bb3d09e6f2d1f1
-
SHA256
2d46535a274f3553877b4250829d759fe3b8fbccc121ccc85ba6576c5b58b954
-
SHA512
0de0160e4c436bfe8d67222b5ed2a8a29c2f16d3dbba1bf6e27b910754043fe7700baa9908fa1fd31ea1d8273f52cccb7bd1106ced8eb830e8dc4c1271ec8d5e
-
SSDEEP
384:xPyZNjtU2mzQBz22XBVvNZiAtnCjx/PEQROY4zEiEVbg/zy:pyZ66TfUAgx/7ROYYEiE1g/O
Score10/10-
Modifies firewall policy service
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1AppInit DLLs
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1AppInit DLLs
1