Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
21/08/2024, 05:54
Static task
static1
Behavioral task
behavioral1
Sample
b2537bd00585ae2d60c717c6712be8eb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b2537bd00585ae2d60c717c6712be8eb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b2537bd00585ae2d60c717c6712be8eb_JaffaCakes118.exe
-
Size
36KB
-
MD5
b2537bd00585ae2d60c717c6712be8eb
-
SHA1
f5e499f7559e59c76e6a83a691b1e65965fb1aa4
-
SHA256
b5efa74506a9cc9aa6f2f7234989edac808ffbcb35eb196815bc88bb1e8c7716
-
SHA512
36d346de5aab25c3c3399dd647527991e01e6bceeb255c4b1f1b38045daa9039033d4e5e034d9d9b33bc70766279bab8f5e5d2b3bc4a1cea78d4b2d2430b09c5
-
SSDEEP
768:WxjWWrXbIDTLPTQGGAnGGXkDGGeGGGGGNGGRHJARGGGGGGGGGGGGGGGGGGGGGGGK:Wxj9bsTPQGGeGGXkDGGeGGGGGNGGRHJm
Malware Config
Signatures
-
Modifies WinLogon for persistence 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit = "userinit.exe,C:\\Users\\Admin\\AppData\\Local\\Temp\\init.exe" b2537bd00585ae2d60c717c6712be8eb_JaffaCakes118.exe