Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
5b0ea51e95974f2df1524a19d798c422_JaffaCakes118
-
Size
172KB
-
Sample
240719-jq3q7szeml
-
MD5
5b0ea51e95974f2df1524a19d798c422
-
SHA1
21e2ffb6e2d230736847548795cbc7fb6e59c136
-
SHA256
7c1c73ab42696e39505979ff9238b35a3c4bd60dda2576ba8770cd7a297c37d7
-
SHA512
bf02f4e9b3e4a65dd3f3272168ab88b7ab894a5ecbe72c92f68362953c40f7fb3c116fbd59c41095602ff796084cf0ab313e8a7eb855ee54410ec3e11cb38da0
-
SSDEEP
3072:H2YOj+Rd/HB7oV7HV3ffDoStyMhV5HRHULEZ3+1/9qOFzk:hOj+rWJffMWhV5HRHUgItFz
Static task
static1
Behavioral task
behavioral1
Sample
5b0ea51e95974f2df1524a19d798c422_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5b0ea51e95974f2df1524a19d798c422_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
5b0ea51e95974f2df1524a19d798c422_JaffaCakes118
-
Size
172KB
-
MD5
5b0ea51e95974f2df1524a19d798c422
-
SHA1
21e2ffb6e2d230736847548795cbc7fb6e59c136
-
SHA256
7c1c73ab42696e39505979ff9238b35a3c4bd60dda2576ba8770cd7a297c37d7
-
SHA512
bf02f4e9b3e4a65dd3f3272168ab88b7ab894a5ecbe72c92f68362953c40f7fb3c116fbd59c41095602ff796084cf0ab313e8a7eb855ee54410ec3e11cb38da0
-
SSDEEP
3072:H2YOj+Rd/HB7oV7HV3ffDoStyMhV5HRHULEZ3+1/9qOFzk:hOj+rWJffMWhV5HRHUgItFz
-
Creates new service(s)
-
Drops file in Drivers directory
-
Modifies Windows Firewall
-
Server Software Component: Terminal Services DLL
-
Loads dropped DLL
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
2Windows Service
2Event Triggered Execution
1Netsh Helper DLL
1Server Software Component
1Terminal Services DLL
1Privilege Escalation
Create or Modify System Process
2Windows Service
2Event Triggered Execution
1Netsh Helper DLL
1