Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
77e11e9f67859c9edc9288a024e0aabc_JaffaCakes118
-
Size
96KB
-
Sample
240727-mmvszaxfkc
-
MD5
77e11e9f67859c9edc9288a024e0aabc
-
SHA1
762c6f40ae7e7f24da0f70cda2731f9d7bf5ab1b
-
SHA256
3b5b5a3eecd5e6a791e78417da423813492855b8b9c1a8f1510f317aec2160fb
-
SHA512
8550c80930f01ffee5598dccb25a48ab3866b23556e124ebbb5122e800d0eaf6d58087e0e0198ea8d84871bb0e9f69de079ed8c536db83b1801649f2b3dea5e2
-
SSDEEP
3072:2D7c8rgevqta8pRJaBQjs6C9FgBTL4dota1EGWi:28Iqo8pPjTyqcEg
Static task
static1
Behavioral task
behavioral1
Sample
77e11e9f67859c9edc9288a024e0aabc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
77e11e9f67859c9edc9288a024e0aabc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
77e11e9f67859c9edc9288a024e0aabc_JaffaCakes118
-
Size
96KB
-
MD5
77e11e9f67859c9edc9288a024e0aabc
-
SHA1
762c6f40ae7e7f24da0f70cda2731f9d7bf5ab1b
-
SHA256
3b5b5a3eecd5e6a791e78417da423813492855b8b9c1a8f1510f317aec2160fb
-
SHA512
8550c80930f01ffee5598dccb25a48ab3866b23556e124ebbb5122e800d0eaf6d58087e0e0198ea8d84871bb0e9f69de079ed8c536db83b1801649f2b3dea5e2
-
SSDEEP
3072:2D7c8rgevqta8pRJaBQjs6C9FgBTL4dota1EGWi:28Iqo8pPjTyqcEg
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Modifies Windows Firewall
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
4Disable or Modify System Firewall
1Disable or Modify Tools
3Modify Registry
4