Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2bde9bb2940cfe262c1803fae0f64a92_JaffaCakes118
-
Size
1.6MB
-
Sample
240708-lscnxawaqc
-
MD5
2bde9bb2940cfe262c1803fae0f64a92
-
SHA1
ed639dc378ae29c48894b4e183b81fdecaa6ca47
-
SHA256
8a626050f0f4a431d60f547535842256202e6c3b07d79edeb10ce17d95802448
-
SHA512
206b3f4d533e72f1f81aed49d9ff9913f29b7507122c7cb40ec65efd92d211bd4207af84494488e6adc82a7b2975125cdd097442a846ba681d224eccc13c76d7
-
SSDEEP
24576:AOXeZJ8NI8rerQZb+md4wmoeZJ8NI8DerQZb+md4wmZoj4:W8rerQZbd2Z8DerQZbd2doj4
Behavioral task
behavioral1
Sample
2bde9bb2940cfe262c1803fae0f64a92_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2bde9bb2940cfe262c1803fae0f64a92_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
2bde9bb2940cfe262c1803fae0f64a92_JaffaCakes118
-
Size
1.6MB
-
MD5
2bde9bb2940cfe262c1803fae0f64a92
-
SHA1
ed639dc378ae29c48894b4e183b81fdecaa6ca47
-
SHA256
8a626050f0f4a431d60f547535842256202e6c3b07d79edeb10ce17d95802448
-
SHA512
206b3f4d533e72f1f81aed49d9ff9913f29b7507122c7cb40ec65efd92d211bd4207af84494488e6adc82a7b2975125cdd097442a846ba681d224eccc13c76d7
-
SSDEEP
24576:AOXeZJ8NI8rerQZb+md4wmoeZJ8NI8DerQZb+md4wmZoj4:W8rerQZbd2Z8DerQZbd2doj4
Score10/10-
Modifies visibility of file extensions in Explorer
-
Blocks application from running via registry modification
Adds application to list of disallowed applications.
-
Event Triggered Execution: Image File Execution Options Injection
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1