Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
e19fe99ffd28c418aaa0af90f02ccc4e_JaffaCakes118
-
Size
162KB
-
Sample
240915-d4cjaatfmj
-
MD5
e19fe99ffd28c418aaa0af90f02ccc4e
-
SHA1
98b9eee2961d15252ec25c2392799410b75d3c18
-
SHA256
7ede4f089e9012b685c2a35f968ff9788b44a956b51c84c01be62ef2611b92ae
-
SHA512
b28f971c5b25185fc7826555f670c10d88d89aecff41674d94f57216359eeb57b2813f436ae4263e083bf76a634bbbb0a90289a9e97c43f475687f82cd86ea7e
-
SSDEEP
3072:VOgpp9ARzWvkPeX+O4WylbzxUMyhdSQvdh6m8OBeETioM:Ak+RzKlXuWEbzxU5dSiPBeAio
Behavioral task
behavioral1
Sample
e19fe99ffd28c418aaa0af90f02ccc4e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e19fe99ffd28c418aaa0af90f02ccc4e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
e19fe99ffd28c418aaa0af90f02ccc4e_JaffaCakes118
-
Size
162KB
-
MD5
e19fe99ffd28c418aaa0af90f02ccc4e
-
SHA1
98b9eee2961d15252ec25c2392799410b75d3c18
-
SHA256
7ede4f089e9012b685c2a35f968ff9788b44a956b51c84c01be62ef2611b92ae
-
SHA512
b28f971c5b25185fc7826555f670c10d88d89aecff41674d94f57216359eeb57b2813f436ae4263e083bf76a634bbbb0a90289a9e97c43f475687f82cd86ea7e
-
SSDEEP
3072:VOgpp9ARzWvkPeX+O4WylbzxUMyhdSQvdh6m8OBeETioM:Ak+RzKlXuWEbzxU5dSiPBeAio
Score10/10-
Modifies firewall policy service
-
Adds policy Run key to start application
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Active Setup
1Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
3Active Setup
1Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1