Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bd6cda0a8e00eebfbb5a8ee48dbba142_JaffaCakes118
-
Size
734KB
-
Sample
240823-2grlpashkr
-
MD5
bd6cda0a8e00eebfbb5a8ee48dbba142
-
SHA1
99bd0411b9b95c455b63c4e4557c16b108a5ab12
-
SHA256
ae8ec96878d441551a8b9eb137c99e98cc606ee8ea8e1ca2dcda512df46cf438
-
SHA512
0af6c33edd4b76e5a760bd91a43636ad243da916c4d93b449f50db1141f218d6a3931bb9e413ae7e5de2628a470a9663eb0cd577acab9e3a604907ef88bfe013
-
SSDEEP
12288:bkZMrKuT9eES2EGfKMlAvDuicrvX7KmtKDgGeIttwoPR5pWZhAIRXHYnrmJ:bkZCXTqjMWvVcLX7xKlFttwYQRXHYrmJ
Static task
static1
Behavioral task
behavioral1
Sample
bd6cda0a8e00eebfbb5a8ee48dbba142_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bd6cda0a8e00eebfbb5a8ee48dbba142_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
bd6cda0a8e00eebfbb5a8ee48dbba142_JaffaCakes118
-
Size
734KB
-
MD5
bd6cda0a8e00eebfbb5a8ee48dbba142
-
SHA1
99bd0411b9b95c455b63c4e4557c16b108a5ab12
-
SHA256
ae8ec96878d441551a8b9eb137c99e98cc606ee8ea8e1ca2dcda512df46cf438
-
SHA512
0af6c33edd4b76e5a760bd91a43636ad243da916c4d93b449f50db1141f218d6a3931bb9e413ae7e5de2628a470a9663eb0cd577acab9e3a604907ef88bfe013
-
SSDEEP
12288:bkZMrKuT9eES2EGfKMlAvDuicrvX7KmtKDgGeIttwoPR5pWZhAIRXHYnrmJ:bkZCXTqjMWvVcLX7xKlFttwYQRXHYrmJ
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1