Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0c8467d6372b785b099abeeb63e154ad_JaffaCakes118
-
Size
22KB
-
Sample
240625-e1jzmazfrf
-
MD5
0c8467d6372b785b099abeeb63e154ad
-
SHA1
e3c252024b1d1e7a5400edaea9279ba4583a0f24
-
SHA256
b10fd450f4dfdbe8f7778c495e5c4ac80a25dd45a2e4d63ef254fb53d6470551
-
SHA512
b65654bd29b9bcd87b29ddd039d230afd354855ea3a2e50e6ed86159bb0322987a1bf9b06775658c90a9c3ff436879c8cf91ba9775a110d19f5cf701133e2891
-
SSDEEP
384:JPyZNjtU2mSEImLyT1qLYZmAc5xvUZMujoHREWAY/z29mne5:ByZexyTMkVc5xvkoHHA629m0
Static task
static1
Behavioral task
behavioral1
Sample
0c8467d6372b785b099abeeb63e154ad_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0c8467d6372b785b099abeeb63e154ad_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
0c8467d6372b785b099abeeb63e154ad_JaffaCakes118
-
Size
22KB
-
MD5
0c8467d6372b785b099abeeb63e154ad
-
SHA1
e3c252024b1d1e7a5400edaea9279ba4583a0f24
-
SHA256
b10fd450f4dfdbe8f7778c495e5c4ac80a25dd45a2e4d63ef254fb53d6470551
-
SHA512
b65654bd29b9bcd87b29ddd039d230afd354855ea3a2e50e6ed86159bb0322987a1bf9b06775658c90a9c3ff436879c8cf91ba9775a110d19f5cf701133e2891
-
SSDEEP
384:JPyZNjtU2mSEImLyT1qLYZmAc5xvUZMujoHREWAY/z29mne5:ByZexyTMkVc5xvkoHHA629m0
Score10/10-
Modifies firewall policy service
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1AppInit DLLs
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1AppInit DLLs
1