Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f5c78e29ae80f3ece5688886c856277b_JaffaCakes118
-
Size
1.5MB
-
Sample
240925-l9vaaashkb
-
MD5
f5c78e29ae80f3ece5688886c856277b
-
SHA1
1e109e7d2dbf9c48fe4c5b67f444385321f0eeeb
-
SHA256
e88c29fa50452e4efec946dd7f74bba78436ce1e76ab91af95d309334ab566c9
-
SHA512
9f23a53c967132470981c435b05637e1ae944134fd034b3dfc68c5b43c76b785753667a6e5f24f18b83c548fdc1c9c1632fd7e28806466cc27a58c0fc5ed1b6c
-
SSDEEP
24576:ovKIHpIn8AWk7i/qrJw+Wlw5htY3pRx21SPm/YI3B9tviVCKCpfwdEpdA14:BgW8Xk+mJw+9fYZCGAYIR9tviILoQ
Static task
static1
Behavioral task
behavioral1
Sample
f5c78e29ae80f3ece5688886c856277b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5c78e29ae80f3ece5688886c856277b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
f5c78e29ae80f3ece5688886c856277b_JaffaCakes118
-
Size
1.5MB
-
MD5
f5c78e29ae80f3ece5688886c856277b
-
SHA1
1e109e7d2dbf9c48fe4c5b67f444385321f0eeeb
-
SHA256
e88c29fa50452e4efec946dd7f74bba78436ce1e76ab91af95d309334ab566c9
-
SHA512
9f23a53c967132470981c435b05637e1ae944134fd034b3dfc68c5b43c76b785753667a6e5f24f18b83c548fdc1c9c1632fd7e28806466cc27a58c0fc5ed1b6c
-
SSDEEP
24576:ovKIHpIn8AWk7i/qrJw+Wlw5htY3pRx21SPm/YI3B9tviVCKCpfwdEpdA14:BgW8Xk+mJw+9fYZCGAYIR9tviILoQ
Score6/10-
Adds Run key to start application
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1