Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f0d7e9535e9ec52cbe7ae17ca4279c93_JaffaCakes118
-
Size
816KB
-
Sample
240921-3mqf9a1arl
-
MD5
f0d7e9535e9ec52cbe7ae17ca4279c93
-
SHA1
2c8144a0fd625bffefb9035ef0938c8829425e60
-
SHA256
965ad90eaea9ecd7843521404c116179411a8531ba0072bcef81397c0c48be95
-
SHA512
cc57b0570c3485a940e05726ebd04c5204fede213c8763f4938e425ae1b6c77804a80f4619f05a188366e887f7decfbbeb6a36b1536bf41959d3378b26fc33c4
-
SSDEEP
24576:RcOrpZv4PlBue4jV4Nc9GUP4Qu2cGW9gAW:HrpR49j4ZH9NP4QtW9a
Static task
static1
Behavioral task
behavioral1
Sample
f0d7e9535e9ec52cbe7ae17ca4279c93_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f0d7e9535e9ec52cbe7ae17ca4279c93_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
f0d7e9535e9ec52cbe7ae17ca4279c93_JaffaCakes118
-
Size
816KB
-
MD5
f0d7e9535e9ec52cbe7ae17ca4279c93
-
SHA1
2c8144a0fd625bffefb9035ef0938c8829425e60
-
SHA256
965ad90eaea9ecd7843521404c116179411a8531ba0072bcef81397c0c48be95
-
SHA512
cc57b0570c3485a940e05726ebd04c5204fede213c8763f4938e425ae1b6c77804a80f4619f05a188366e887f7decfbbeb6a36b1536bf41959d3378b26fc33c4
-
SSDEEP
24576:RcOrpZv4PlBue4jV4Nc9GUP4Qu2cGW9gAW:HrpR49j4ZH9NP4QtW9a
-
Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
-
Credentials from Password Stores: Windows Credential Manager
Suspicious access to Credentials History.
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
2Credentials from Web Browsers
1Windows Credential Manager
1Unsecured Credentials
2Credentials In Files
1Credentials in Registry
1