Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
5eefb13dda842bb25d79c085e60c41cf_JaffaCakes118
-
Size
384KB
-
Sample
240720-eg85eayepb
-
MD5
5eefb13dda842bb25d79c085e60c41cf
-
SHA1
8773edd01e7165d7b6b3bf39ce08be251767a892
-
SHA256
b807a0152ff3b7681e5a40a8736d6424a9d75098c67cf42b8624830dbb9e36bc
-
SHA512
a7eeea688d1483d2aa4421c40da1a3c7baf67276329e0fd2ff67e09c1d63f30b2d39970273f28a4483081c22c498c29ccdde1be642818df9264364e51c19b826
-
SSDEEP
3072:y+aDvo8q37qmr34t7ZSBYfkVoFdRrqo0aRaA/HF673+UWHIfrzajLmp4:SboXLqmrCNkVsuaRaU6mHGm
Static task
static1
Behavioral task
behavioral1
Sample
5eefb13dda842bb25d79c085e60c41cf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5eefb13dda842bb25d79c085e60c41cf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
5eefb13dda842bb25d79c085e60c41cf_JaffaCakes118
-
Size
384KB
-
MD5
5eefb13dda842bb25d79c085e60c41cf
-
SHA1
8773edd01e7165d7b6b3bf39ce08be251767a892
-
SHA256
b807a0152ff3b7681e5a40a8736d6424a9d75098c67cf42b8624830dbb9e36bc
-
SHA512
a7eeea688d1483d2aa4421c40da1a3c7baf67276329e0fd2ff67e09c1d63f30b2d39970273f28a4483081c22c498c29ccdde1be642818df9264364e51c19b826
-
SSDEEP
3072:y+aDvo8q37qmr34t7ZSBYfkVoFdRrqo0aRaA/HF673+UWHIfrzajLmp4:SboXLqmrCNkVsuaRaU6mHGm
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-