Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
df09d454d262eb37dd1d79f6fb0485fe_JaffaCakes118
-
Size
124KB
-
Sample
240913-2qg4lstfnc
-
MD5
df09d454d262eb37dd1d79f6fb0485fe
-
SHA1
a0ad6d2d05514d2144a21bf83cf0815f7d8c8447
-
SHA256
e0f354f9541a0d4c63a75d05c7e6d8e905182ebf3a7c62d222e43c06c6daf037
-
SHA512
e2be91d43a9e88632cc897c4b39a89f498db109e9fa0a7bf65958a4603cc0af6d35b66bb7ee150091dd8c964cc73ab2658d59414f16b238efdeabc32d33b99e2
-
SSDEEP
1536:TtElhwRDyuBxeDtMYHa27J14ltxporZ45iMNeG0h/y:ZElhwRDykeV6gJ1uCt45eq
Static task
static1
Behavioral task
behavioral1
Sample
df09d454d262eb37dd1d79f6fb0485fe_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df09d454d262eb37dd1d79f6fb0485fe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
df09d454d262eb37dd1d79f6fb0485fe_JaffaCakes118
-
Size
124KB
-
MD5
df09d454d262eb37dd1d79f6fb0485fe
-
SHA1
a0ad6d2d05514d2144a21bf83cf0815f7d8c8447
-
SHA256
e0f354f9541a0d4c63a75d05c7e6d8e905182ebf3a7c62d222e43c06c6daf037
-
SHA512
e2be91d43a9e88632cc897c4b39a89f498db109e9fa0a7bf65958a4603cc0af6d35b66bb7ee150091dd8c964cc73ab2658d59414f16b238efdeabc32d33b99e2
-
SSDEEP
1536:TtElhwRDyuBxeDtMYHa27J14ltxporZ45iMNeG0h/y:ZElhwRDykeV6gJ1uCt45eq
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2