Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f060c92d180f63b4a60156b924f2e4ef_JaffaCakes118
-
Size
344KB
-
Sample
240921-wx5klawcre
-
MD5
f060c92d180f63b4a60156b924f2e4ef
-
SHA1
fc103aa88c07f4a7fed4d9d09454da2c32d63bf3
-
SHA256
a3ab5e0e5305f48d1d004fb3d52fa81bf24d65756b9768efdbbbd9a4193d94a9
-
SHA512
0a849e94d736e026208490b639c760632cc52894b8f764c5e6b10acbbe16bb3bfb26579b4276f6cda21ed7f94036c592ac641b50dbaffbb724cd24204ba0f0ce
-
SSDEEP
6144:GGzmuWyUufA1BXT/Jmt1WvhdKgvmH0v8LwTjJZscy0/p20UVwMcitXZOERs4vOy:LNUuYz/JDUgvmm8Sscy0sVw/GZOELvO
Static task
static1
Behavioral task
behavioral1
Sample
f060c92d180f63b4a60156b924f2e4ef_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f060c92d180f63b4a60156b924f2e4ef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
f060c92d180f63b4a60156b924f2e4ef_JaffaCakes118
-
Size
344KB
-
MD5
f060c92d180f63b4a60156b924f2e4ef
-
SHA1
fc103aa88c07f4a7fed4d9d09454da2c32d63bf3
-
SHA256
a3ab5e0e5305f48d1d004fb3d52fa81bf24d65756b9768efdbbbd9a4193d94a9
-
SHA512
0a849e94d736e026208490b639c760632cc52894b8f764c5e6b10acbbe16bb3bfb26579b4276f6cda21ed7f94036c592ac641b50dbaffbb724cd24204ba0f0ce
-
SSDEEP
6144:GGzmuWyUufA1BXT/Jmt1WvhdKgvmH0v8LwTjJZscy0/p20UVwMcitXZOERs4vOy:LNUuYz/JDUgvmm8Sscy0sVw/GZOELvO
-
Disables taskbar notifications via registry modification
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
3Disable or Modify Tools
3Modify Registry
4