Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f9da07ad6475a8b0215f03c4507dd22c_JaffaCakes118
-
Size
448KB
-
Sample
240927-gqwa1sybpn
-
MD5
f9da07ad6475a8b0215f03c4507dd22c
-
SHA1
f166925a282b2b203d67df2e2691e2071dc7aacc
-
SHA256
39ec1bd1604c872851006d0439e6ae51e942a7d5d5f763f5c0c4524e8aee5646
-
SHA512
a62014783f09d4a525b439eea59543299fe18e123bd65abc680d35fe364d23fc8ce9f65529302693b331232ef604caa13ecd3c0b30ce9720d4a265e6c81ddd94
-
SSDEEP
12288:PBGpbBfAB8RvDB4N+nT74cWgr/x3jDqc7Vi:5GpblAB8RLBU+nT74cDzDqc5i
Static task
static1
Behavioral task
behavioral1
Sample
f9da07ad6475a8b0215f03c4507dd22c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9da07ad6475a8b0215f03c4507dd22c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
f9da07ad6475a8b0215f03c4507dd22c_JaffaCakes118
-
Size
448KB
-
MD5
f9da07ad6475a8b0215f03c4507dd22c
-
SHA1
f166925a282b2b203d67df2e2691e2071dc7aacc
-
SHA256
39ec1bd1604c872851006d0439e6ae51e942a7d5d5f763f5c0c4524e8aee5646
-
SHA512
a62014783f09d4a525b439eea59543299fe18e123bd65abc680d35fe364d23fc8ce9f65529302693b331232ef604caa13ecd3c0b30ce9720d4a265e6c81ddd94
-
SSDEEP
12288:PBGpbBfAB8RvDB4N+nT74cWgr/x3jDqc7Vi:5GpblAB8RLBU+nT74cDzDqc5i
Score10/10-
Disables taskbar notifications via registry modification
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
3Disable or Modify Tools
3Modify Registry
5