Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a2438be61b0bc7f004a5d2dfed3e89a2_JaffaCakes118
-
Size
1.3MB
-
Sample
240817-m2nm7svdrk
-
MD5
a2438be61b0bc7f004a5d2dfed3e89a2
-
SHA1
f0d7fa65d35865ccadff2cb57f28633d184cb595
-
SHA256
66ebac2b0e2a2c16ce96e7da54cfc88a74f2380de8df06d7f2136ffc512b13d9
-
SHA512
c600a37e7f849c13f653b423b2ebcb5ca684f653eee755f6d9a5b25cbf86440ca6baa58aac5d4524644f3a9d3b2eda985c32d3a56264d8cdfb0b9f208696d875
-
SSDEEP
24576:TpRFJNPQ4GH9nT8oADVeO8Fw/5bA3/Wp1l9rjJ946Gxu5zx:N/xS18oADUF+M/4lpL7wgz
Static task
static1
Behavioral task
behavioral1
Sample
a2438be61b0bc7f004a5d2dfed3e89a2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a2438be61b0bc7f004a5d2dfed3e89a2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
a2438be61b0bc7f004a5d2dfed3e89a2_JaffaCakes118
-
Size
1.3MB
-
MD5
a2438be61b0bc7f004a5d2dfed3e89a2
-
SHA1
f0d7fa65d35865ccadff2cb57f28633d184cb595
-
SHA256
66ebac2b0e2a2c16ce96e7da54cfc88a74f2380de8df06d7f2136ffc512b13d9
-
SHA512
c600a37e7f849c13f653b423b2ebcb5ca684f653eee755f6d9a5b25cbf86440ca6baa58aac5d4524644f3a9d3b2eda985c32d3a56264d8cdfb0b9f208696d875
-
SSDEEP
24576:TpRFJNPQ4GH9nT8oADVeO8Fw/5bA3/Wp1l9rjJ946Gxu5zx:N/xS18oADUF+M/4lpL7wgz
-
Modifies Windows Firewall
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
2