Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
dc407a02dc26fd5d2040441a33c1ad49_JaffaCakes118
-
Size
124KB
-
Sample
240912-nv7m6stelf
-
MD5
dc407a02dc26fd5d2040441a33c1ad49
-
SHA1
3b3fd5554c1d25fcb19592d7aafa7a1b388ee01d
-
SHA256
7a0c2a9833ef6897eceaa876f732e12171995a6e0c1d1151153d0626f1d9730d
-
SHA512
2a1d18f41ddb60b17035b699d28caa89a6630d588623a62f332fc33987a83f9c23e067f187c1b9c6f02f76a3c018723fbcf6e244526688f33995e8007237b43d
-
SSDEEP
1536:L6bzEFPF/67NxkiQixA+alh98r8Y9USv1jyPwo7JaS1:mbzEFPF/67gjH8ri8iwQL
Static task
static1
Behavioral task
behavioral1
Sample
dc407a02dc26fd5d2040441a33c1ad49_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc407a02dc26fd5d2040441a33c1ad49_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
dc407a02dc26fd5d2040441a33c1ad49_JaffaCakes118
-
Size
124KB
-
MD5
dc407a02dc26fd5d2040441a33c1ad49
-
SHA1
3b3fd5554c1d25fcb19592d7aafa7a1b388ee01d
-
SHA256
7a0c2a9833ef6897eceaa876f732e12171995a6e0c1d1151153d0626f1d9730d
-
SHA512
2a1d18f41ddb60b17035b699d28caa89a6630d588623a62f332fc33987a83f9c23e067f187c1b9c6f02f76a3c018723fbcf6e244526688f33995e8007237b43d
-
SSDEEP
1536:L6bzEFPF/67NxkiQixA+alh98r8Y9USv1jyPwo7JaS1:mbzEFPF/67gjH8ri8iwQL
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2