Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c2ae87ddfa5a6236414d17172bb42eeb_JaffaCakes118
-
Size
728KB
-
Sample
240826-kz3y1awbjh
-
MD5
c2ae87ddfa5a6236414d17172bb42eeb
-
SHA1
a185edaad14dcd4d95a093a62f424b0f171a6007
-
SHA256
f4eb3c7888cdefb3fc37f60769960551af31285b376281c6d9ebbdc011139cea
-
SHA512
0d1e6af9be85dc40d0bf336869b483c7e7a454b047c7aedc5b4f639e7f49246fdad55f429548e5170d628f8df9e8067f20bdd177c7187ccdd0edce2dd1b69323
-
SSDEEP
12288:lEcF8D2K53tGcAOYYsLN2Z8bbXD/meGDgGeItoEc9GspWZhASRXHYnrmO:lEc8H5fMLN2Kb7DrGlFtov9GsqRXHYrt
Static task
static1
Behavioral task
behavioral1
Sample
c2ae87ddfa5a6236414d17172bb42eeb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c2ae87ddfa5a6236414d17172bb42eeb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
c2ae87ddfa5a6236414d17172bb42eeb_JaffaCakes118
-
Size
728KB
-
MD5
c2ae87ddfa5a6236414d17172bb42eeb
-
SHA1
a185edaad14dcd4d95a093a62f424b0f171a6007
-
SHA256
f4eb3c7888cdefb3fc37f60769960551af31285b376281c6d9ebbdc011139cea
-
SHA512
0d1e6af9be85dc40d0bf336869b483c7e7a454b047c7aedc5b4f639e7f49246fdad55f429548e5170d628f8df9e8067f20bdd177c7187ccdd0edce2dd1b69323
-
SSDEEP
12288:lEcF8D2K53tGcAOYYsLN2Z8bbXD/meGDgGeItoEc9GspWZhASRXHYnrmO:lEc8H5fMLN2Kb7DrGlFtov9GsqRXHYrt
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1