Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f9dad092e4b7b398646caf508d184a20_JaffaCakes118
-
Size
394KB
-
Sample
240927-grthtaybrp
-
MD5
f9dad092e4b7b398646caf508d184a20
-
SHA1
b8ff34c25401a48569847e51800825f921f840a3
-
SHA256
dba197f46afbd2a53ed52cec808f0a9016d87d6a3cccb091c171fea5cce2ee11
-
SHA512
f9dfdb1f8987ae4a9a0f9e0338acda9a229038e8beaef79b21e0d52c77d6183aaa41ba1fb9a47275ddf7111b6b6d77152c857e991a57175b7fd44df981fdf6fd
-
SSDEEP
6144:NtKe6YiDdv3m3mgKHIl7bNIAROzTuaGzLcv0vs+Tt9GtJpPk3k69Y1ZAYknox1hC:NtKe6Zv23YdAPaGgN+7GJTZsox9G1uyH
Static task
static1
Behavioral task
behavioral1
Sample
f9dad092e4b7b398646caf508d184a20_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9dad092e4b7b398646caf508d184a20_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
f9dad092e4b7b398646caf508d184a20_JaffaCakes118
-
Size
394KB
-
MD5
f9dad092e4b7b398646caf508d184a20
-
SHA1
b8ff34c25401a48569847e51800825f921f840a3
-
SHA256
dba197f46afbd2a53ed52cec808f0a9016d87d6a3cccb091c171fea5cce2ee11
-
SHA512
f9dfdb1f8987ae4a9a0f9e0338acda9a229038e8beaef79b21e0d52c77d6183aaa41ba1fb9a47275ddf7111b6b6d77152c857e991a57175b7fd44df981fdf6fd
-
SSDEEP
6144:NtKe6YiDdv3m3mgKHIl7bNIAROzTuaGzLcv0vs+Tt9GtJpPk3k69Y1ZAYknox1hC:NtKe6Zv23YdAPaGgN+7GJTZsox9G1uyH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Modifies system executable filetype association
-
Adds Run key to start application
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Change Default File Association
1