ca271a5021ed5e193503231b39a2927ad5d172fa29d213f18b0f494efbeddd96 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

283f0561d9...18.exe

windows7-x64

8

283f0561d9...18.exe

windows10-2004-x64

8

Sharing

General

Target

283f0561d9b517ff0aa2b1d40116f17c_JaffaCakes118
Size

44KB
Sample

240706-mn6lvsweqq
MD5

283f0561d9b517ff0aa2b1d40116f17c
SHA1

d6f90a54433bdd3900b593d580c5d0004dd007c4
SHA256

ca271a5021ed5e193503231b39a2927ad5d172fa29d213f18b0f494efbeddd96
SHA512

5533255c6b7034f8cc3fb313a3fec13f9ea0321a0e3a20aba9b50895135fc748294b8828ed2bacb2a2db728e6ea8e32980071a8d34893956e2656a5a044e7fe0
SSDEEP

384:rqJsJ6KCiADKNDvnOiK37AhlxKmFQp7h6AaaoXMypct5mAahUk:rdJEVDKNjnOi4/tPaaoXTat5mnhUk

Score

8^/10

persistence privilege_escalation

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

283f0561d9b517ff0aa2b1d40116f17c_JaffaCakes118.exe

Resource

win7-20240704-en

persistence privilege_escalation

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

283f0561d9b517ff0aa2b1d40116f17c_JaffaCakes118.exe

Resource

win10v2004-20240508-en

persistence privilege_escalation

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  283f0561d9b517ff0aa2b1d40116f17c_JaffaCakes118
- Size
  
  44KB
- MD5
  
  283f0561d9b517ff0aa2b1d40116f17c
- SHA1
  
  d6f90a54433bdd3900b593d580c5d0004dd007c4
- SHA256
  
  ca271a5021ed5e193503231b39a2927ad5d172fa29d213f18b0f494efbeddd96
- SHA512
  
  5533255c6b7034f8cc3fb313a3fec13f9ea0321a0e3a20aba9b50895135fc748294b8828ed2bacb2a2db728e6ea8e32980071a8d34893956e2656a5a044e7fe0
- SSDEEP
  
  384:rqJsJ6KCiADKNDvnOiK37AhlxKmFQp7h6AaaoXMypct5mAahUk:rdJEVDKNjnOi4/tPaaoXTat5mnhUk
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.