Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
223e199541887817834aa922575c9bc0_JaffaCakes118
-
Size
305KB
-
Sample
240703-nqgk7azhqa
-
MD5
223e199541887817834aa922575c9bc0
-
SHA1
836845a3b4fd18c4f520e9fec18f421daf77b96c
-
SHA256
4772cea1874c35be783830e477351fe6d3bd580e6b83482068c52c559f5a505f
-
SHA512
a0ef062bc5a1e5d5d15ea5dd5831492405294b03efd4e2c483e634f7daa9e5525d77fc28d4f6d345263f9c4684ac7220c1b119f9333d89d2f5b4e13f1322b95d
-
SSDEEP
6144:9hgHdPkvWPDtJrrKDLfMLE51cHRjyeDyLOhrHhVH/:YdsvuDtJ3GLkfBr/
Static task
static1
Behavioral task
behavioral1
Sample
223e199541887817834aa922575c9bc0_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
223e199541887817834aa922575c9bc0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
223e199541887817834aa922575c9bc0_JaffaCakes118
-
Size
305KB
-
MD5
223e199541887817834aa922575c9bc0
-
SHA1
836845a3b4fd18c4f520e9fec18f421daf77b96c
-
SHA256
4772cea1874c35be783830e477351fe6d3bd580e6b83482068c52c559f5a505f
-
SHA512
a0ef062bc5a1e5d5d15ea5dd5831492405294b03efd4e2c483e634f7daa9e5525d77fc28d4f6d345263f9c4684ac7220c1b119f9333d89d2f5b4e13f1322b95d
-
SSDEEP
6144:9hgHdPkvWPDtJrrKDLfMLE51cHRjyeDyLOhrHhVH/:YdsvuDtJ3GLkfBr/
Score8/10-
Modifies Windows Firewall
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1