Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
de560ddab42429a2b2788880d841eede_JaffaCakes118
-
Size
15KB
-
Sample
240913-qg6vtssfjd
-
MD5
de560ddab42429a2b2788880d841eede
-
SHA1
07c91f4f544ce7a92599c8c3ff7f0c42618c8d47
-
SHA256
0b7ccdfb0e2b050c459d21e01acef56101860df4e513a1a0d90593fd8cd08490
-
SHA512
9da2283d4d653d0f357fed51b3547deaea08f78b61ce4da835800cdafb12647cb665e806e21087872c2f350f3fa92be20fb98d745f466d3cfebcb3a6c45cdd4e
-
SSDEEP
192:77Vcb9Asny6YyVNtrj+818vCziI4QJulQLFpLdH4+1swnaWr4Cf:776GsjF9SwiIPJXNx1swnaWrr
Static task
static1
Behavioral task
behavioral1
Sample
de560ddab42429a2b2788880d841eede_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de560ddab42429a2b2788880d841eede_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
de560ddab42429a2b2788880d841eede_JaffaCakes118
-
Size
15KB
-
MD5
de560ddab42429a2b2788880d841eede
-
SHA1
07c91f4f544ce7a92599c8c3ff7f0c42618c8d47
-
SHA256
0b7ccdfb0e2b050c459d21e01acef56101860df4e513a1a0d90593fd8cd08490
-
SHA512
9da2283d4d653d0f357fed51b3547deaea08f78b61ce4da835800cdafb12647cb665e806e21087872c2f350f3fa92be20fb98d745f466d3cfebcb3a6c45cdd4e
-
SSDEEP
192:77Vcb9Asny6YyVNtrj+818vCziI4QJulQLFpLdH4+1swnaWr4Cf:776GsjF9SwiIPJXNx1swnaWrr
-
Disables Task Manager via registry modification
-
Modifies Windows Firewall
-
Adds Run key to start application
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1