Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
8e8f9540b9234ebac4a3e41cf5d8fae9_JaffaCakes118
-
Size
32KB
-
Sample
240812-njxntstamc
-
MD5
8e8f9540b9234ebac4a3e41cf5d8fae9
-
SHA1
8b397bcf45c4668dd1070afbfe2a2cded066cac6
-
SHA256
50067e896a694f4c83e7a4f324cf19d05c1c70db8d1d4fe979af702964d5f5d7
-
SHA512
02e26c09f330a8d5b118f7a63f1bb20db5fddc7c6617575c71f32a3b1b9c473a355ce8c0669474b090e674fc3d644ebb425b1b8cdd350ad6a5f51ad28a4cba18
-
SSDEEP
384:ZaXSbS8RQP1RxVkosHVmWebRJZZPzAT0DyE7Q1Ww7//ChLu3/Y:ZaXMssKbRJZ9zs0yQQ1W8/6hLu3/
Static task
static1
Behavioral task
behavioral1
Sample
8e8f9540b9234ebac4a3e41cf5d8fae9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8e8f9540b9234ebac4a3e41cf5d8fae9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
8e8f9540b9234ebac4a3e41cf5d8fae9_JaffaCakes118
-
Size
32KB
-
MD5
8e8f9540b9234ebac4a3e41cf5d8fae9
-
SHA1
8b397bcf45c4668dd1070afbfe2a2cded066cac6
-
SHA256
50067e896a694f4c83e7a4f324cf19d05c1c70db8d1d4fe979af702964d5f5d7
-
SHA512
02e26c09f330a8d5b118f7a63f1bb20db5fddc7c6617575c71f32a3b1b9c473a355ce8c0669474b090e674fc3d644ebb425b1b8cdd350ad6a5f51ad28a4cba18
-
SSDEEP
384:ZaXSbS8RQP1RxVkosHVmWebRJZZPzAT0DyE7Q1Ww7//ChLu3/Y:ZaXMssKbRJZ9zs0yQQ1W8/6hLu3/
Score8/10-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-