Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d51703d0dd319d78be502976affbf09a_JaffaCakes118
-
Size
532KB
-
Sample
240908-zx3yjsvgjn
-
MD5
d51703d0dd319d78be502976affbf09a
-
SHA1
be127474a51591db7cd452b6b59f7bd56eec30b0
-
SHA256
3a80af3ac1a48af64e8ade7cf686b1c7277045c8ddfd5487754ddc44dfa3640b
-
SHA512
769a83d42dd6d907fd53d65d04b557fcc8a81b5bf7377b6bc2247e058cad37ae7e1b95ba7b12b29e8e829ef23f7e04cc424bb3b00d7dbf85df3a3f4e3c2eeae8
-
SSDEEP
6144:UZfec9EbXDk6Rk8KU/UOPSe570Szp3bE2El/UOPSe570Szp3irG1VVE+IA:UZWtI6RktOB0vuOB0Jut
Static task
static1
Behavioral task
behavioral1
Sample
d51703d0dd319d78be502976affbf09a_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d51703d0dd319d78be502976affbf09a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
d51703d0dd319d78be502976affbf09a_JaffaCakes118
-
Size
532KB
-
MD5
d51703d0dd319d78be502976affbf09a
-
SHA1
be127474a51591db7cd452b6b59f7bd56eec30b0
-
SHA256
3a80af3ac1a48af64e8ade7cf686b1c7277045c8ddfd5487754ddc44dfa3640b
-
SHA512
769a83d42dd6d907fd53d65d04b557fcc8a81b5bf7377b6bc2247e058cad37ae7e1b95ba7b12b29e8e829ef23f7e04cc424bb3b00d7dbf85df3a3f4e3c2eeae8
-
SSDEEP
6144:UZfec9EbXDk6Rk8KU/UOPSe570Szp3bE2El/UOPSe570Szp3irG1VVE+IA:UZWtI6RktOB0vuOB0Jut
-
Modifies visibility of file extensions in Explorer
-
Blocks application from running via registry modification
Adds application to list of disallowed applications.
-
Event Triggered Execution: Image File Execution Options Injection
-
Executes dropped EXE
-
Loads dropped DLL
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Indicator Removal
1File Deletion
1Modify Registry
1