Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b2d25ffb01559adb44238297df15ee8c_JaffaCakes118
-
Size
88KB
-
Sample
240821-krax9atbjn
-
MD5
b2d25ffb01559adb44238297df15ee8c
-
SHA1
b7841197c92c6da6ad2292ba8fa8669920a0a3c1
-
SHA256
4049668e0170e0902703690339323ace24174e8dd01686d9b51ebe3dd9ea4444
-
SHA512
6a60fd8d0fd6ae473d10e57b9d0dfcf6d4df0cb641b94e08e8a9e634eb75419d7ef8958090ee2c9637bc48fe7c90a87b224f4588c407df3ad098c71afbaaf795
-
SSDEEP
1536:MfftWR8o/u7vrCqnF+4TtD9uWeLQax3ML/wl4b7o:MHcZu7veSJunLbm/wlA7o
Static task
static1
Behavioral task
behavioral1
Sample
b2d25ffb01559adb44238297df15ee8c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b2d25ffb01559adb44238297df15ee8c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
b2d25ffb01559adb44238297df15ee8c_JaffaCakes118
-
Size
88KB
-
MD5
b2d25ffb01559adb44238297df15ee8c
-
SHA1
b7841197c92c6da6ad2292ba8fa8669920a0a3c1
-
SHA256
4049668e0170e0902703690339323ace24174e8dd01686d9b51ebe3dd9ea4444
-
SHA512
6a60fd8d0fd6ae473d10e57b9d0dfcf6d4df0cb641b94e08e8a9e634eb75419d7ef8958090ee2c9637bc48fe7c90a87b224f4588c407df3ad098c71afbaaf795
-
SSDEEP
1536:MfftWR8o/u7vrCqnF+4TtD9uWeLQax3ML/wl4b7o:MHcZu7veSJunLbm/wlA7o
Score8/10-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Drops file in System32 directory
-