Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
964235d04d10d68df7746ccd30a79f3e_JaffaCakes118
-
Size
456KB
-
Sample
240814-qkj58sthkb
-
MD5
964235d04d10d68df7746ccd30a79f3e
-
SHA1
7f58617aeabaea54da9cf55cbf91a904ced6a50b
-
SHA256
8c272c354cbf966638be30e835527a45e99f1bf5859cefcdd3960584fa8dadbd
-
SHA512
86bfbc78b4bbbfea35221a473f1cbf54908817ed248d5eb68d4df4785ed420c96b82fc68ac5038beb1ec6cff6ca66735eab04b2fcbd2983c3a1a44e7e8b7e2c3
-
SSDEEP
12288:jEVXKpmok/if4JgTIoq43H2cE05nMx11DGkfb7i:jEtR3iAJgMe3H2cJCx1YOb7i
Static task
static1
Behavioral task
behavioral1
Sample
964235d04d10d68df7746ccd30a79f3e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
964235d04d10d68df7746ccd30a79f3e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
964235d04d10d68df7746ccd30a79f3e_JaffaCakes118
-
Size
456KB
-
MD5
964235d04d10d68df7746ccd30a79f3e
-
SHA1
7f58617aeabaea54da9cf55cbf91a904ced6a50b
-
SHA256
8c272c354cbf966638be30e835527a45e99f1bf5859cefcdd3960584fa8dadbd
-
SHA512
86bfbc78b4bbbfea35221a473f1cbf54908817ed248d5eb68d4df4785ed420c96b82fc68ac5038beb1ec6cff6ca66735eab04b2fcbd2983c3a1a44e7e8b7e2c3
-
SSDEEP
12288:jEVXKpmok/if4JgTIoq43H2cE05nMx11DGkfb7i:jEtR3iAJgMe3H2cJCx1YOb7i
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Enumerates processes with tasklist
-
Suspicious use of SetThreadContext
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Pre-OS Boot
1Bootkit
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2Pre-OS Boot
1Bootkit
1