Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
8ef19e2bfc4dd0842dca8c9d6535cec8_JaffaCakes118
-
Size
26KB
-
Sample
240812-qzb36stclr
-
MD5
8ef19e2bfc4dd0842dca8c9d6535cec8
-
SHA1
d6df6c81aadb17b23dea8e96b3cf14ebc9137e6e
-
SHA256
07976da1e129ce7305a4e93786713039b1f35ed0254b8744919feaa0db91f3f8
-
SHA512
529927b981ec280a9d5d7061d16db8279f14ebf0224a44d5ce0f407be4f7da0c212dcdddadaa5f283cfac4619ae8d6f886ceac4be9d33e8ae99111185295d72a
-
SSDEEP
384:HMWShb/b4ZAGrGRXDb+OqqM0ul/0ovTxUuNsRunCF6G+PsMDjlCW:HMhb/kGBDb+OE7yQULM9zsMPs
Static task
static1
Behavioral task
behavioral1
Sample
8ef19e2bfc4dd0842dca8c9d6535cec8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8ef19e2bfc4dd0842dca8c9d6535cec8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
8ef19e2bfc4dd0842dca8c9d6535cec8_JaffaCakes118
-
Size
26KB
-
MD5
8ef19e2bfc4dd0842dca8c9d6535cec8
-
SHA1
d6df6c81aadb17b23dea8e96b3cf14ebc9137e6e
-
SHA256
07976da1e129ce7305a4e93786713039b1f35ed0254b8744919feaa0db91f3f8
-
SHA512
529927b981ec280a9d5d7061d16db8279f14ebf0224a44d5ce0f407be4f7da0c212dcdddadaa5f283cfac4619ae8d6f886ceac4be9d33e8ae99111185295d72a
-
SSDEEP
384:HMWShb/b4ZAGrGRXDb+OqqM0ul/0ovTxUuNsRunCF6G+PsMDjlCW:HMhb/kGBDb+OE7yQULM9zsMPs
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Modifies WinLogon
-