Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
adcce65d918543ca2b1851de20cd2753_JaffaCakes118
-
Size
23KB
-
Sample
240820-emywmawfjj
-
MD5
adcce65d918543ca2b1851de20cd2753
-
SHA1
049502f6aa12e07f0ea5f76bd8cca1f353f37c92
-
SHA256
3c16b6a4a6c166976fe54ed31171e218ec0c9036375ee6835b42dee7f1198921
-
SHA512
33fb8a3fd0c8212bfdf267eceb611d696b9d0dcd286ef80fabb9c2cabdf19d900f3d3319604a03f910b50f96963d843364eca80375cb6b6a5a729419bf4cc084
-
SSDEEP
384:zrwkVdcAYqetz9U4HD2iCrFuu4dGE+KN0f0onfn1wQFT7OcZme0y68BnaFn8uCiQ:zrx4AYqSD298VGD+/QFT6cZj0y6Yap8Z
Static task
static1
Behavioral task
behavioral1
Sample
adcce65d918543ca2b1851de20cd2753_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
adcce65d918543ca2b1851de20cd2753_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
adcce65d918543ca2b1851de20cd2753_JaffaCakes118
-
Size
23KB
-
MD5
adcce65d918543ca2b1851de20cd2753
-
SHA1
049502f6aa12e07f0ea5f76bd8cca1f353f37c92
-
SHA256
3c16b6a4a6c166976fe54ed31171e218ec0c9036375ee6835b42dee7f1198921
-
SHA512
33fb8a3fd0c8212bfdf267eceb611d696b9d0dcd286ef80fabb9c2cabdf19d900f3d3319604a03f910b50f96963d843364eca80375cb6b6a5a729419bf4cc084
-
SSDEEP
384:zrwkVdcAYqetz9U4HD2iCrFuu4dGE+KN0f0onfn1wQFT7OcZme0y68BnaFn8uCiQ:zrx4AYqSD298VGD+/QFT6cZj0y6Yap8Z
Score8/10-
Drops file in Drivers directory
-
Event Triggered Execution: Image File Execution Options Injection
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Image File Execution Options Injection
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Image File Execution Options Injection
1