Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
007a3c2f9aba07465a744f0df38b4e08_JaffaCakes118
-
Size
1.0MB
-
Sample
240619-zt7sbswbrk
-
MD5
007a3c2f9aba07465a744f0df38b4e08
-
SHA1
a5bb88664f3e32959b6a30dbbb559bfacb39ead5
-
SHA256
24f7bc6583a6b8ac8354cb09743202829a0aa5bec6ae6f8ce620d51954cdb479
-
SHA512
6b84ecc39735b47c946d5d348dcc62ffd3582dbacc4b088301e88ef8f0bf4f62f977629601db23215feea20bb53da52ffdbc96cfeaf9d30d38e8ed3a7cbe2c4c
-
SSDEEP
384:WPyZNjtU2mO4JDNs6WpTIWbjhzTVIrjBNCzElE4vl:WyZv6NXeschzaXDiElEC
Static task
static1
Behavioral task
behavioral1
Sample
007a3c2f9aba07465a744f0df38b4e08_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
007a3c2f9aba07465a744f0df38b4e08_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
007a3c2f9aba07465a744f0df38b4e08_JaffaCakes118
-
Size
1.0MB
-
MD5
007a3c2f9aba07465a744f0df38b4e08
-
SHA1
a5bb88664f3e32959b6a30dbbb559bfacb39ead5
-
SHA256
24f7bc6583a6b8ac8354cb09743202829a0aa5bec6ae6f8ce620d51954cdb479
-
SHA512
6b84ecc39735b47c946d5d348dcc62ffd3582dbacc4b088301e88ef8f0bf4f62f977629601db23215feea20bb53da52ffdbc96cfeaf9d30d38e8ed3a7cbe2c4c
-
SSDEEP
384:WPyZNjtU2mO4JDNs6WpTIWbjhzTVIrjBNCzElE4vl:WyZv6NXeschzaXDiElEC
Score10/10-
Modifies firewall policy service
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1AppInit DLLs
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1AppInit DLLs
1