Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
cf247554b90f95d3ad23ee235abc0588_JaffaCakes118
-
Size
95KB
-
Sample
240906-kpbrrsxcpe
-
MD5
cf247554b90f95d3ad23ee235abc0588
-
SHA1
0b7d67af495cf7452739c54afdd0486ada470c11
-
SHA256
e910782909bd210e5c8ae288bc19a8772722dd9f0e305a4079351082796cc786
-
SHA512
420f91883952859bb3b24a00ea8d52eb13371c582dad7f1dadaf0ae4ba1ccfb409166bdd61abbdb59cc87a9ae16c6acbdb2ce38dffeaa50e640bf7c9671c83d2
-
SSDEEP
1536:lOvR5PkQgHnYZVKjoahyAmbETof9vMKNmjquqoZTErpBwjwmF7a4ah:0vvMQgHnYoB8ZwjquXBFeZ
Static task
static1
Behavioral task
behavioral1
Sample
cf247554b90f95d3ad23ee235abc0588_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
cf247554b90f95d3ad23ee235abc0588_JaffaCakes118
-
Size
95KB
-
MD5
cf247554b90f95d3ad23ee235abc0588
-
SHA1
0b7d67af495cf7452739c54afdd0486ada470c11
-
SHA256
e910782909bd210e5c8ae288bc19a8772722dd9f0e305a4079351082796cc786
-
SHA512
420f91883952859bb3b24a00ea8d52eb13371c582dad7f1dadaf0ae4ba1ccfb409166bdd61abbdb59cc87a9ae16c6acbdb2ce38dffeaa50e640bf7c9671c83d2
-
SSDEEP
1536:lOvR5PkQgHnYZVKjoahyAmbETof9vMKNmjquqoZTErpBwjwmF7a4ah:0vvMQgHnYoB8ZwjquXBFeZ
-
Modifies firewall policy service
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
4Disable or Modify System Firewall
1Disable or Modify Tools
3Modify Registry
5