Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d1c1c65ebbe6841318f805bc18903e2a_JaffaCakes118
-
Size
1015KB
-
Sample
240907-mwbfpazhjb
-
MD5
d1c1c65ebbe6841318f805bc18903e2a
-
SHA1
e53656dc9d23cd215c9344a326fb07a8ea8e7798
-
SHA256
3d0e23b7162f7519a6af2a19bc8e663d203fea31b20d50a092b682c80ea2db65
-
SHA512
60c3b5f6be8e2f66e5454cd8d9825e2bd5bccfac96ad6ea1d91f50f61c6e8f3711626dce3d0deb6689ab065fd3331524b36ca1d709347ca2076b0101a7d37425
-
SSDEEP
24576:1XPopeICUoUpYXN598RgEx1mq1Rvvnfe+oYwqdYwJSNH5+8rY/dcWe:1XPopeICUoUpYXN59O7xUaRXnW+oYwQe
Static task
static1
Behavioral task
behavioral1
Sample
d1c1c65ebbe6841318f805bc18903e2a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d1c1c65ebbe6841318f805bc18903e2a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
d1c1c65ebbe6841318f805bc18903e2a_JaffaCakes118
-
Size
1015KB
-
MD5
d1c1c65ebbe6841318f805bc18903e2a
-
SHA1
e53656dc9d23cd215c9344a326fb07a8ea8e7798
-
SHA256
3d0e23b7162f7519a6af2a19bc8e663d203fea31b20d50a092b682c80ea2db65
-
SHA512
60c3b5f6be8e2f66e5454cd8d9825e2bd5bccfac96ad6ea1d91f50f61c6e8f3711626dce3d0deb6689ab065fd3331524b36ca1d709347ca2076b0101a7d37425
-
SSDEEP
24576:1XPopeICUoUpYXN598RgEx1mq1Rvvnfe+oYwqdYwJSNH5+8rY/dcWe:1XPopeICUoUpYXN59O7xUaRXnW+oYwQe
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Drops file in Drivers directory
-
Modifies Windows Firewall
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1