Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
8a6e52cd2364b6bd4a3cdaafbdbdbcdc_JaffaCakes118
-
Size
1.2MB
-
Sample
240811-p437sazfnl
-
MD5
8a6e52cd2364b6bd4a3cdaafbdbdbcdc
-
SHA1
e152956da43fe8c751101890897457de97a19f41
-
SHA256
e76fb72139b40e409bda7bd85dbc8b05271c7edc7fa12a9e9227e2d8eec0a5c2
-
SHA512
7178ce2b94aefbde9c2b8f292685ddb9ea1b8d02126f7ee5392cf272b79d394988a3878c3398c65f876d10591f954bb36f385cd519fbf33d64f5868b7e386d46
-
SSDEEP
24576:DE/RzW7bZRJ3TBH5SHNUzHF8V8Ui12yLj5tXP:DE56XZRJ31kHCHF6+jXP
Static task
static1
Behavioral task
behavioral1
Sample
8a6e52cd2364b6bd4a3cdaafbdbdbcdc_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8a6e52cd2364b6bd4a3cdaafbdbdbcdc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
8a6e52cd2364b6bd4a3cdaafbdbdbcdc_JaffaCakes118
-
Size
1.2MB
-
MD5
8a6e52cd2364b6bd4a3cdaafbdbdbcdc
-
SHA1
e152956da43fe8c751101890897457de97a19f41
-
SHA256
e76fb72139b40e409bda7bd85dbc8b05271c7edc7fa12a9e9227e2d8eec0a5c2
-
SHA512
7178ce2b94aefbde9c2b8f292685ddb9ea1b8d02126f7ee5392cf272b79d394988a3878c3398c65f876d10591f954bb36f385cd519fbf33d64f5868b7e386d46
-
SSDEEP
24576:DE/RzW7bZRJ3TBH5SHNUzHF8V8Ui12yLj5tXP:DE56XZRJ31kHCHF6+jXP
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Modifies Windows Firewall
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
4Disable or Modify System Firewall
1Disable or Modify Tools
3Modify Registry
4