b43ba48274cbbbd5024f8ff462a8bec271d1cb7595d0754713356c39690d5f37 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

7

3c26b9a3b2...18.exe

windows7-x64

3c26b9a3b2...18.exe

windows10-2004-x64

Sharing

General

Target

3c26b9a3b2596cf9940a4c30eb3e6231_JaffaCakes118
Size

1.4MB
Sample

240712-f7qw7asglc
MD5

3c26b9a3b2596cf9940a4c30eb3e6231
SHA1

71c318d3fd0c5f6b44aed013eb456e8e1a9cfe49
SHA256

b43ba48274cbbbd5024f8ff462a8bec271d1cb7595d0754713356c39690d5f37
SHA512

420642f8b6a9a77286b4da498e7a9aa2f9075ac9cf1ed438dcec77c05445c0840951f37d2d458fe8edf70411a2b00a102c2e49f894659ca819e38f72a782b195
SSDEEP

12288:HOQcxcBMryTLIz3lEg+OioielffKpfffffWffffffeTZiekCrk2OMMiaSgeSwIHf:HO/sLIz3lEg+13/TlLrkWgL

Score

10^/10

evasion persistence upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

3c26b9a3b2596cf9940a4c30eb3e6231_JaffaCakes118.exe

Resource

win7-20240708-en

evasion persistence upx

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

3c26b9a3b2596cf9940a4c30eb3e6231_JaffaCakes118.exe

Resource

win10v2004-20240709-en

evasion persistence upx

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  3c26b9a3b2596cf9940a4c30eb3e6231_JaffaCakes118
- Size
  
  1.4MB
- MD5
  
  3c26b9a3b2596cf9940a4c30eb3e6231
- SHA1
  
  71c318d3fd0c5f6b44aed013eb456e8e1a9cfe49
- SHA256
  
  b43ba48274cbbbd5024f8ff462a8bec271d1cb7595d0754713356c39690d5f37
- SHA512
  
  420642f8b6a9a77286b4da498e7a9aa2f9075ac9cf1ed438dcec77c05445c0840951f37d2d458fe8edf70411a2b00a102c2e49f894659ca819e38f72a782b195
- SSDEEP
  
  12288:HOQcxcBMryTLIz3lEg+OioielffKpfffffWffffffeTZiekCrk2OMMiaSgeSwIHf:HO/sLIz3lEg+13/TlLrkWgL
Score

10^/10

evasion persistence upx
- Modifies WinLogon for persistence
  persistence
- Disables Task Manager via registry modification
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceupx

behavioral2

evasionpersistenceupx

© 2018-2025

Terms | Privacy