Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b1d0b2c809c52db4ed1f1a61cc48d6e7_JaffaCakes118
-
Size
11KB
-
Sample
240821-c5t92sweld
-
MD5
b1d0b2c809c52db4ed1f1a61cc48d6e7
-
SHA1
6279feb68fe09dd9a283566c98bd238f57e8d2f9
-
SHA256
2769cda05f529f1ac3189993cb0632e9a67a3563a90c1848018796363583f8c0
-
SHA512
12bf5ff9f8a6ac69d8fe56909f2ad937505617885c9e189d7645bd5a7ac288a82cb8c579fe74669d422f18b4ebbb98541d98495b068726ab31b8df1f0b101f9b
-
SSDEEP
192:6FdN2aCBB8MG+JwiecLVUrS8Q4PU94m6iIekJ2sLmxCo9F29EZ6LQnME87VeQcZ:8NgjaieWUrSvFtZULIB9F27cMb2
Behavioral task
behavioral1
Sample
b1d0b2c809c52db4ed1f1a61cc48d6e7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b1d0b2c809c52db4ed1f1a61cc48d6e7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
b1d0b2c809c52db4ed1f1a61cc48d6e7_JaffaCakes118
-
Size
11KB
-
MD5
b1d0b2c809c52db4ed1f1a61cc48d6e7
-
SHA1
6279feb68fe09dd9a283566c98bd238f57e8d2f9
-
SHA256
2769cda05f529f1ac3189993cb0632e9a67a3563a90c1848018796363583f8c0
-
SHA512
12bf5ff9f8a6ac69d8fe56909f2ad937505617885c9e189d7645bd5a7ac288a82cb8c579fe74669d422f18b4ebbb98541d98495b068726ab31b8df1f0b101f9b
-
SSDEEP
192:6FdN2aCBB8MG+JwiecLVUrS8Q4PU94m6iIekJ2sLmxCo9F29EZ6LQnME87VeQcZ:8NgjaieWUrSvFtZULIB9F27cMb2
Score8/10-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-