Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
00177a0e91cd16c521f562ff5e5922f4_JaffaCakes118
-
Size
23KB
-
Sample
240619-xr5tvaxekd
-
MD5
00177a0e91cd16c521f562ff5e5922f4
-
SHA1
ef7b34c49dc3175e35f3b56749f10b17101d023b
-
SHA256
646bf918e57a026cf01e9308b346279db9a3fdc3df4d2535fa742160e55642dd
-
SHA512
891246247115f58dd0a3ee778e8e76827c57692253920cc66e86b23a3f5f46634b846836c9bef32387cfe1f6346e3a2a06036f1a427d2b47040568bd506261e1
-
SSDEEP
384:JidD9d6GAW6ABDq4PD6K7Qp0bjP0TE1/vxzxTfwVNxBf:A+ax1MpYMsvVxTfwVR
Static task
static1
Behavioral task
behavioral1
Sample
00177a0e91cd16c521f562ff5e5922f4_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
00177a0e91cd16c521f562ff5e5922f4_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
00177a0e91cd16c521f562ff5e5922f4_JaffaCakes118
-
Size
23KB
-
MD5
00177a0e91cd16c521f562ff5e5922f4
-
SHA1
ef7b34c49dc3175e35f3b56749f10b17101d023b
-
SHA256
646bf918e57a026cf01e9308b346279db9a3fdc3df4d2535fa742160e55642dd
-
SHA512
891246247115f58dd0a3ee778e8e76827c57692253920cc66e86b23a3f5f46634b846836c9bef32387cfe1f6346e3a2a06036f1a427d2b47040568bd506261e1
-
SSDEEP
384:JidD9d6GAW6ABDq4PD6K7Qp0bjP0TE1/vxzxTfwVNxBf:A+ax1MpYMsvVxTfwVR
Score10/10-
Modifies firewall policy service
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1AppInit DLLs
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1AppInit DLLs
1