Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2e54cc4048d90189f67eb165881b9078_JaffaCakes118
-
Size
98KB
-
Sample
240709-ahm64syejd
-
MD5
2e54cc4048d90189f67eb165881b9078
-
SHA1
ec661d97867d039cf2caf438e9bdcbce5ebf215d
-
SHA256
c4e4c92c95c9655a8473627d06696463824feb7e7eb956b772f597ede4a29e0e
-
SHA512
65bb3cd0329bc650deade336a53c4f2ac318245915614aa7da82d40aa0580252b9642aae6fc28c0c6d0f564eb8fbf86e6ed7c090190eacb032bb2a260734428e
-
SSDEEP
3072:FyXZfJF4pwOe9Pnc+m/ehnS6eNi1vCJwnkUc:F+JF4pwOmhhS6Fnk
Behavioral task
behavioral1
Sample
2e54cc4048d90189f67eb165881b9078_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2e54cc4048d90189f67eb165881b9078_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
2e54cc4048d90189f67eb165881b9078_JaffaCakes118
-
Size
98KB
-
MD5
2e54cc4048d90189f67eb165881b9078
-
SHA1
ec661d97867d039cf2caf438e9bdcbce5ebf215d
-
SHA256
c4e4c92c95c9655a8473627d06696463824feb7e7eb956b772f597ede4a29e0e
-
SHA512
65bb3cd0329bc650deade336a53c4f2ac318245915614aa7da82d40aa0580252b9642aae6fc28c0c6d0f564eb8fbf86e6ed7c090190eacb032bb2a260734428e
-
SSDEEP
3072:FyXZfJF4pwOe9Pnc+m/ehnS6eNi1vCJwnkUc:F+JF4pwOmhhS6Fnk
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-