Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a5d11abe289ed53b2ed0861a79135a5d_JaffaCakes118
-
Size
3.1MB
-
Sample
240818-hsvmyavbkj
-
MD5
a5d11abe289ed53b2ed0861a79135a5d
-
SHA1
352f7d3bf3ae52941fd36ca785ed276b0fd96703
-
SHA256
a5f9a826ff1b1d433d4f28094c6f5a94a73c25af471dfecf5e4edf036f606575
-
SHA512
4e23b8137b2041bc67c079c47f68f4b9b16df2ddb58feb8c18989f8ca489fb2cd680a0e527f3764658b0a5d3d8a1eeebcc377ca897891488b04f4fe2896d51c7
-
SSDEEP
49152:Y1erQZbd2DVerQZbd2DVerQZbd2DberQZbd20lqROv:hrQZ08rQZ08rQZ0SrQZhh
Behavioral task
behavioral1
Sample
a5d11abe289ed53b2ed0861a79135a5d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a5d11abe289ed53b2ed0861a79135a5d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
a5d11abe289ed53b2ed0861a79135a5d_JaffaCakes118
-
Size
3.1MB
-
MD5
a5d11abe289ed53b2ed0861a79135a5d
-
SHA1
352f7d3bf3ae52941fd36ca785ed276b0fd96703
-
SHA256
a5f9a826ff1b1d433d4f28094c6f5a94a73c25af471dfecf5e4edf036f606575
-
SHA512
4e23b8137b2041bc67c079c47f68f4b9b16df2ddb58feb8c18989f8ca489fb2cd680a0e527f3764658b0a5d3d8a1eeebcc377ca897891488b04f4fe2896d51c7
-
SSDEEP
49152:Y1erQZbd2DVerQZbd2DVerQZbd2DberQZbd20lqROv:hrQZ08rQZ08rQZ0SrQZhh
-
Modifies visibility of file extensions in Explorer
-
Blocks application from running via registry modification
Adds application to list of disallowed applications.
-
Event Triggered Execution: Image File Execution Options Injection
-
Executes dropped EXE
-
Loads dropped DLL
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Indicator Removal
1File Deletion
1Modify Registry
1