Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
cfe2e314eecb3f6d9b11a922fbe3fe53_JaffaCakes118
-
Size
4.5MB
-
Sample
240906-s7rjyavbkq
-
MD5
cfe2e314eecb3f6d9b11a922fbe3fe53
-
SHA1
a3126fc7b68c49050f2219832a6faef9fff7f745
-
SHA256
c0bc42231a128e57cb761b78e688a1081e3024115dd0dfdbf0087850dec3ffff
-
SHA512
eb4125eb67e8ea10fab2829e43b044cd88c998d72577a15ff54482643a9d9682ecd9373fd385215f2648be1f24fe33729c6553dfd6be240024bf8ddf7a5f8097
-
SSDEEP
49152:bserQZbd2WerQZbd2WerQZbd2WerQZbd2WerQZbd2WerQZbd2s+:BrQZorQZorQZorQZorQZorQZW
Static task
static1
Behavioral task
behavioral1
Sample
cfe2e314eecb3f6d9b11a922fbe3fe53_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cfe2e314eecb3f6d9b11a922fbe3fe53_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
cfe2e314eecb3f6d9b11a922fbe3fe53_JaffaCakes118
-
Size
4.5MB
-
MD5
cfe2e314eecb3f6d9b11a922fbe3fe53
-
SHA1
a3126fc7b68c49050f2219832a6faef9fff7f745
-
SHA256
c0bc42231a128e57cb761b78e688a1081e3024115dd0dfdbf0087850dec3ffff
-
SHA512
eb4125eb67e8ea10fab2829e43b044cd88c998d72577a15ff54482643a9d9682ecd9373fd385215f2648be1f24fe33729c6553dfd6be240024bf8ddf7a5f8097
-
SSDEEP
49152:bserQZbd2WerQZbd2WerQZbd2WerQZbd2WerQZbd2WerQZbd2s+:BrQZorQZorQZorQZorQZorQZW
-
Modifies visibility of file extensions in Explorer
-
Blocks application from running via registry modification
Adds application to list of disallowed applications.
-
Event Triggered Execution: Image File Execution Options Injection
-
Executes dropped EXE
-
Loads dropped DLL
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Indicator Removal
1File Deletion
1Modify Registry
1