Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bd72aafc009da834184cba5572ad4e01_JaffaCakes118
-
Size
167KB
-
Sample
240823-2lwq7s1eld
-
MD5
bd72aafc009da834184cba5572ad4e01
-
SHA1
4785d26a14b6c0d59bd38200fc55254be0d1813e
-
SHA256
b6016e51554eb82bc04cde345aef75d0beecec31d16c8189a0c062925fa4937d
-
SHA512
ece6465bdcae7d99b5deb0b6f1626dcb5c3902910f60720d58f66e0469119e3b693fda7d4baed197c8c59254c55fe29c34ebbbdc1c96f16785f18e6a117a1c89
-
SSDEEP
3072:zYNQKPWDyYRefVJltZrpRl1P3svMlnUW8v784texH9oSDA:MNSDyYRO1thp7Sr784Q
Static task
static1
Behavioral task
behavioral1
Sample
bd72aafc009da834184cba5572ad4e01_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bd72aafc009da834184cba5572ad4e01_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
bd72aafc009da834184cba5572ad4e01_JaffaCakes118
-
Size
167KB
-
MD5
bd72aafc009da834184cba5572ad4e01
-
SHA1
4785d26a14b6c0d59bd38200fc55254be0d1813e
-
SHA256
b6016e51554eb82bc04cde345aef75d0beecec31d16c8189a0c062925fa4937d
-
SHA512
ece6465bdcae7d99b5deb0b6f1626dcb5c3902910f60720d58f66e0469119e3b693fda7d4baed197c8c59254c55fe29c34ebbbdc1c96f16785f18e6a117a1c89
-
SSDEEP
3072:zYNQKPWDyYRefVJltZrpRl1P3svMlnUW8v784texH9oSDA:MNSDyYRO1thp7Sr784Q
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Modifies Windows Firewall
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
4Disable or Modify System Firewall
1Disable or Modify Tools
3Modify Registry
4