c1e11a48542203f8bf4d4d8ae76c7e99699da9671c449db8be71b53f547477e9 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

2327569f0f...18.exe

windows7-x64

8

2327569f0f...18.exe

windows10-2004-x64

8

Sharing

General

Target

2327569f0f2f8083a202481348dd386e_JaffaCakes118
Size

31KB
Sample

240703-vprhbszbmp
MD5

2327569f0f2f8083a202481348dd386e
SHA1

91336479a23bbbc71e87771297d20d87d5751415
SHA256

c1e11a48542203f8bf4d4d8ae76c7e99699da9671c449db8be71b53f547477e9
SHA512

9c6dd89e46887c6fa557458f3abecca8fc06ff6869ab88f85bc9baffd58f432f755b2763144198d31f78ba9a699ba80ee5ffc58b5b715867a7d102211961c7a0
SSDEEP

768:2PYRPy2urgqE8QmP5pd87SfHJRbkYWhE9w:2PqOBr27eES

Score

8^/10

persistence privilege_escalation

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2327569f0f2f8083a202481348dd386e_JaffaCakes118.exe

Resource

win7-20240508-en

persistence privilege_escalation

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

2327569f0f2f8083a202481348dd386e_JaffaCakes118.exe

Resource

win10v2004-20240508-en

persistence privilege_escalation

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  2327569f0f2f8083a202481348dd386e_JaffaCakes118
- Size
  
  31KB
- MD5
  
  2327569f0f2f8083a202481348dd386e
- SHA1
  
  91336479a23bbbc71e87771297d20d87d5751415
- SHA256
  
  c1e11a48542203f8bf4d4d8ae76c7e99699da9671c449db8be71b53f547477e9
- SHA512
  
  9c6dd89e46887c6fa557458f3abecca8fc06ff6869ab88f85bc9baffd58f432f755b2763144198d31f78ba9a699ba80ee5ffc58b5b715867a7d102211961c7a0
- SSDEEP
  
  768:2PYRPy2urgqE8QmP5pd87SfHJRbkYWhE9w:2PqOBr27eES
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Deletes itself
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.