Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
33d790544bbc241e074481a7b8f012ab_JaffaCakes118
-
Size
544KB
-
Sample
240710-jlpzjsvfjn
-
MD5
33d790544bbc241e074481a7b8f012ab
-
SHA1
14222b527877179e6b9ddec1d31d2f5aef23a895
-
SHA256
dfcb9e891629d3eae611d9eb19a34320141779f33183d35378cddbc1ccc79a73
-
SHA512
638697a5d0d7a477a670b7750c09ed05e5fa6d7ec37012e7a5b0a70cb5cbb5e598a9b92cbf8d5d8b9c8ea62f2d6e54373edb24f711f0accdeeb7c4ab854301fb
-
SSDEEP
12288:gQIWT/UzJW8ivxh7vHzgryd4GT1QOoJqbbEUqe9mJd/uB28Rr8O9F8/CwM:gQI+cJHiJRTHnxhUqEhe9suB2C8O9O
Static task
static1
Behavioral task
behavioral1
Sample
33d790544bbc241e074481a7b8f012ab_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
33d790544bbc241e074481a7b8f012ab_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
33d790544bbc241e074481a7b8f012ab_JaffaCakes118
-
Size
544KB
-
MD5
33d790544bbc241e074481a7b8f012ab
-
SHA1
14222b527877179e6b9ddec1d31d2f5aef23a895
-
SHA256
dfcb9e891629d3eae611d9eb19a34320141779f33183d35378cddbc1ccc79a73
-
SHA512
638697a5d0d7a477a670b7750c09ed05e5fa6d7ec37012e7a5b0a70cb5cbb5e598a9b92cbf8d5d8b9c8ea62f2d6e54373edb24f711f0accdeeb7c4ab854301fb
-
SSDEEP
12288:gQIWT/UzJW8ivxh7vHzgryd4GT1QOoJqbbEUqe9mJd/uB28Rr8O9F8/CwM:gQI+cJHiJRTHnxhUqEhe9suB2C8O9O
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Adds Run key to start application
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2