Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d2a7233064a6f761525cd723fd43a3b5_JaffaCakes118
-
Size
100KB
-
Sample
240907-xx2pdazdrm
-
MD5
d2a7233064a6f761525cd723fd43a3b5
-
SHA1
50d6301c95b90ea2c6fd09caa8df2b6bf8401bf8
-
SHA256
c3088b2c3d5f41563f0223b60a2fe54f143052e81f535e2920914709296f310e
-
SHA512
44a16de3f2c5aa9d274be2e7dfa4434e6dfafc2e6a929ebe9c97d2317118358de5508b064112d8536791a7808d7536f417f75d97b5deb233001c600d82e61bc3
-
SSDEEP
1536:cITmEWbqFJxLgx8bzUa8Y8GP0uwipq7OFIJDioLXQAFz5t5:cImbqX3F88LppqyYLXQ+5t
Static task
static1
Behavioral task
behavioral1
Sample
d2a7233064a6f761525cd723fd43a3b5_JaffaCakes118.exe
Resource
win7-20240729-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
d2a7233064a6f761525cd723fd43a3b5_JaffaCakes118
-
Size
100KB
-
MD5
d2a7233064a6f761525cd723fd43a3b5
-
SHA1
50d6301c95b90ea2c6fd09caa8df2b6bf8401bf8
-
SHA256
c3088b2c3d5f41563f0223b60a2fe54f143052e81f535e2920914709296f310e
-
SHA512
44a16de3f2c5aa9d274be2e7dfa4434e6dfafc2e6a929ebe9c97d2317118358de5508b064112d8536791a7808d7536f417f75d97b5deb233001c600d82e61bc3
-
SSDEEP
1536:cITmEWbqFJxLgx8bzUa8Y8GP0uwipq7OFIJDioLXQAFz5t5:cImbqX3F88LppqyYLXQ+5t
-
Modifies firewall policy service
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
4Disable or Modify System Firewall
1Disable or Modify Tools
3Modify Registry
5