Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b31eee5c7a2c40724c550188a7d40f32_JaffaCakes118
-
Size
172KB
-
Sample
240821-mlpwbsxcpj
-
MD5
b31eee5c7a2c40724c550188a7d40f32
-
SHA1
5ad696609f777f2e03342215166e94929d2d11b6
-
SHA256
8f07be517cb727771d46d59f434a2849c4e45d028fcd101180c426ab8663326d
-
SHA512
45438195dbefb1491e2c15b11a6ab17d9ed35da449a0e2a1b99fa632d00c1fc447eb194975e5845b084b71ed52adce9655e9b5c0001bd000694d9a44793487d6
-
SSDEEP
3072:9nj9PtfUKINndIc0JE54Lqpijx4fhK9XUPqgiDgYveMgJ7OsmWRL9WEvJmtCz1DI:9jneiLWpAuI9XUTikM0OsRRL9gW1a3
Static task
static1
Behavioral task
behavioral1
Sample
b31eee5c7a2c40724c550188a7d40f32_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b31eee5c7a2c40724c550188a7d40f32_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
b31eee5c7a2c40724c550188a7d40f32_JaffaCakes118
-
Size
172KB
-
MD5
b31eee5c7a2c40724c550188a7d40f32
-
SHA1
5ad696609f777f2e03342215166e94929d2d11b6
-
SHA256
8f07be517cb727771d46d59f434a2849c4e45d028fcd101180c426ab8663326d
-
SHA512
45438195dbefb1491e2c15b11a6ab17d9ed35da449a0e2a1b99fa632d00c1fc447eb194975e5845b084b71ed52adce9655e9b5c0001bd000694d9a44793487d6
-
SSDEEP
3072:9nj9PtfUKINndIc0JE54Lqpijx4fhK9XUPqgiDgYveMgJ7OsmWRL9WEvJmtCz1DI:9jneiLWpAuI9XUTikM0OsRRL9gW1a3
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
3