Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
7379266faf938b9800fb485ce1356199_JaffaCakes118
-
Size
294KB
-
Sample
240726-le8jessgnd
-
MD5
7379266faf938b9800fb485ce1356199
-
SHA1
707a2331f287222389726bcf52c9e07a26f97b81
-
SHA256
aaf919a2e3851aacd5d92162dcb0bf8cb2867a40945fe89009a03bef33b15e26
-
SHA512
177d73364fdc9cdf520fe1debf3956704726a4ea209a590b631a05c240b7a85e0abd5617527cb8ba3c317222f040b1a9f3423a8da434a8ab439c51cd90a04dfb
-
SSDEEP
6144:i2n8sulpr3O5qJDqkS1zTWvpcpP9lzLWtkn:h8suTa5qg4it9l3Wts
Static task
static1
Behavioral task
behavioral1
Sample
7379266faf938b9800fb485ce1356199_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7379266faf938b9800fb485ce1356199_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
7379266faf938b9800fb485ce1356199_JaffaCakes118
-
Size
294KB
-
MD5
7379266faf938b9800fb485ce1356199
-
SHA1
707a2331f287222389726bcf52c9e07a26f97b81
-
SHA256
aaf919a2e3851aacd5d92162dcb0bf8cb2867a40945fe89009a03bef33b15e26
-
SHA512
177d73364fdc9cdf520fe1debf3956704726a4ea209a590b631a05c240b7a85e0abd5617527cb8ba3c317222f040b1a9f3423a8da434a8ab439c51cd90a04dfb
-
SSDEEP
6144:i2n8sulpr3O5qJDqkS1zTWvpcpP9lzLWtkn:h8suTa5qg4it9l3Wts
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Checks for any installed AV software in registry
-
Suspicious use of SetThreadContext
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1