Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3f17fe39c3750cf36e00d02ed92d049e_JaffaCakes118
-
Size
21KB
-
Sample
240712-18p2hasfrp
-
MD5
3f17fe39c3750cf36e00d02ed92d049e
-
SHA1
4e68c3eb16e855cc4fb5b5990f372fce01753390
-
SHA256
27b1f51d75c91979cacec43c28940bdd8ec70958d4f3717236945e871317d429
-
SHA512
f5f998d6effe21444201e73474fd303276e229061b6ed115545c7344b03f260bbc43241607f6cef476ea7de45ba511e7f591df4e06ff03b532a73f9fac3f95ce
-
SSDEEP
384:SIiV728hUQ7Y2P/cVEccDdye7kjlWLe7grPiA8jyrMPhTjanbBoZvp1HOaNJawcV:SRGuY2P0Vo6r7SiAwyrMRjbBHfnbcuyM
Behavioral task
behavioral1
Sample
3f17fe39c3750cf36e00d02ed92d049e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3f17fe39c3750cf36e00d02ed92d049e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
3f17fe39c3750cf36e00d02ed92d049e_JaffaCakes118
-
Size
21KB
-
MD5
3f17fe39c3750cf36e00d02ed92d049e
-
SHA1
4e68c3eb16e855cc4fb5b5990f372fce01753390
-
SHA256
27b1f51d75c91979cacec43c28940bdd8ec70958d4f3717236945e871317d429
-
SHA512
f5f998d6effe21444201e73474fd303276e229061b6ed115545c7344b03f260bbc43241607f6cef476ea7de45ba511e7f591df4e06ff03b532a73f9fac3f95ce
-
SSDEEP
384:SIiV728hUQ7Y2P/cVEccDdye7kjlWLe7grPiA8jyrMPhTjanbBoZvp1HOaNJawcV:SRGuY2P0Vo6r7SiAwyrMRjbBHfnbcuyM
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1