Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c25595e2f8b0fca61679d7d1c5543a26_JaffaCakes118
-
Size
13.4MB
-
Sample
240826-fpa31sxhlm
-
MD5
c25595e2f8b0fca61679d7d1c5543a26
-
SHA1
be7071633afa01e89b3d38643253195a2fc49f8d
-
SHA256
47e6522a99d1bc8c709c24c29a792ace4cc5dfb559b5707f1ca828f521c23856
-
SHA512
09e071af1a9f87c9940fffb8d5bd4a06b6dd943327a4a82c062d331380337b499d66ee62d4ba298da588c1fe42995149a433e8690e3bf0f81246878c2557b402
-
SSDEEP
192:i2VAKqGxc49My2dNQOm49A476byj9zHJeyJ+43cDimP1oydUV8z5L/CldolMGoVj:iPqcxwAd+43cWQ1jUa1LCcM4aeWFz
Static task
static1
Behavioral task
behavioral1
Sample
c25595e2f8b0fca61679d7d1c5543a26_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c25595e2f8b0fca61679d7d1c5543a26_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
c25595e2f8b0fca61679d7d1c5543a26_JaffaCakes118
-
Size
13.4MB
-
MD5
c25595e2f8b0fca61679d7d1c5543a26
-
SHA1
be7071633afa01e89b3d38643253195a2fc49f8d
-
SHA256
47e6522a99d1bc8c709c24c29a792ace4cc5dfb559b5707f1ca828f521c23856
-
SHA512
09e071af1a9f87c9940fffb8d5bd4a06b6dd943327a4a82c062d331380337b499d66ee62d4ba298da588c1fe42995149a433e8690e3bf0f81246878c2557b402
-
SSDEEP
192:i2VAKqGxc49My2dNQOm49A476byj9zHJeyJ+43cDimP1oydUV8z5L/CldolMGoVj:iPqcxwAd+43cWQ1jUa1LCcM4aeWFz
Score10/10-
Modifies WinLogon for persistence
-
Deletes itself
-
Executes dropped EXE
-