Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a4b42e7acf1da9f7860dc7875be7b82f_JaffaCakes118
-
Size
1.4MB
-
Sample
240818-avwn1svhqg
-
MD5
a4b42e7acf1da9f7860dc7875be7b82f
-
SHA1
525c30f5a972361fe5b7137cd76d851f2cdf699c
-
SHA256
4b8f17d3686ff91d3f398d5e48da6fcd511816e1c4b2ab45676526445b522a4d
-
SHA512
943ca7bf1aaa3411ab0d2b3a8680bea9a1101041928cf92a49c5dad0bc4e9e32c881d6158f41adf232c4c46237df75a82a5beeebb0f94120dd0e9127de6a3b5e
-
SSDEEP
24576:3uhaeerQZb+md4wm9OaerQZb+md4wmABOAJqsaS2ROv:YferQZbd29erQZbd2ojlqROv
Behavioral task
behavioral1
Sample
a4b42e7acf1da9f7860dc7875be7b82f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a4b42e7acf1da9f7860dc7875be7b82f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
a4b42e7acf1da9f7860dc7875be7b82f_JaffaCakes118
-
Size
1.4MB
-
MD5
a4b42e7acf1da9f7860dc7875be7b82f
-
SHA1
525c30f5a972361fe5b7137cd76d851f2cdf699c
-
SHA256
4b8f17d3686ff91d3f398d5e48da6fcd511816e1c4b2ab45676526445b522a4d
-
SHA512
943ca7bf1aaa3411ab0d2b3a8680bea9a1101041928cf92a49c5dad0bc4e9e32c881d6158f41adf232c4c46237df75a82a5beeebb0f94120dd0e9127de6a3b5e
-
SSDEEP
24576:3uhaeerQZb+md4wm9OaerQZb+md4wmABOAJqsaS2ROv:YferQZbd29erQZbd2ojlqROv
-
Modifies visibility of file extensions in Explorer
-
Blocks application from running via registry modification
Adds application to list of disallowed applications.
-
Event Triggered Execution: Image File Execution Options Injection
-
Executes dropped EXE
-
Loads dropped DLL
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Indicator Removal
1File Deletion
1Modify Registry
1