Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a3965ef97f19e3a8d589879bd78f75ec_JaffaCakes118
-
Size
996KB
-
Sample
240817-wshj9sygra
-
MD5
a3965ef97f19e3a8d589879bd78f75ec
-
SHA1
7e6e483680f55d3db075121708d020df7cbec15c
-
SHA256
7ea3c4916dca996e771932359fd7ae3d20009edaba27d3a774fcbad152f322e8
-
SHA512
3617886dcad88af7d725a911a00d4ab5c89d530edc0e13b9d3be6d5295634854390e36b4639f179bee6492d90fe5cfca01bf5dffd1e50804d56d5e7d18d3ed7b
-
SSDEEP
12288:gOEeZJys73dOvXDpNjNe8NupOB0Ju9OMeZJys73dOvXDpNjNe8NupOB0JuLeZJyl:GeZJ8NI8IOPeZJ8NI8IO3eZJ8NI8D
Behavioral task
behavioral1
Sample
a3965ef97f19e3a8d589879bd78f75ec_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a3965ef97f19e3a8d589879bd78f75ec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
a3965ef97f19e3a8d589879bd78f75ec_JaffaCakes118
-
Size
996KB
-
MD5
a3965ef97f19e3a8d589879bd78f75ec
-
SHA1
7e6e483680f55d3db075121708d020df7cbec15c
-
SHA256
7ea3c4916dca996e771932359fd7ae3d20009edaba27d3a774fcbad152f322e8
-
SHA512
3617886dcad88af7d725a911a00d4ab5c89d530edc0e13b9d3be6d5295634854390e36b4639f179bee6492d90fe5cfca01bf5dffd1e50804d56d5e7d18d3ed7b
-
SSDEEP
12288:gOEeZJys73dOvXDpNjNe8NupOB0Ju9OMeZJys73dOvXDpNjNe8NupOB0JuLeZJyl:GeZJ8NI8IOPeZJ8NI8IO3eZJ8NI8D
-
Modifies visibility of file extensions in Explorer
-
Blocks application from running via registry modification
Adds application to list of disallowed applications.
-
Event Triggered Execution: Image File Execution Options Injection
-
Executes dropped EXE
-
Loads dropped DLL
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Indicator Removal
1File Deletion
1Modify Registry
1