Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
fc80951e65ba38b71ff45ab23e7c49b3_JaffaCakes118
-
Size
200KB
-
Sample
240928-rxz8natcjg
-
MD5
fc80951e65ba38b71ff45ab23e7c49b3
-
SHA1
9998e37a0b71bac675eac3b681103a5bf9323492
-
SHA256
89e81929e31df67d102b97bf1b3cd4b2a12a6609cc2f59807cefaf03cce66553
-
SHA512
87a71ac5b8eda919b9ab5375359353746940b80189e7fd38b0de54221929856ce0385f7d5649b71e2dbba55bccd9e744ed4d403ad0effa0c0c1c53a1023e4e06
-
SSDEEP
6144:m9SlSvwslnsn9+JuJbfoL2wVH9eI+NJWb:4vwslnsn9+JuJbfoL2wVH9eIJ
Static task
static1
Behavioral task
behavioral1
Sample
fc80951e65ba38b71ff45ab23e7c49b3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc80951e65ba38b71ff45ab23e7c49b3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
fc80951e65ba38b71ff45ab23e7c49b3_JaffaCakes118
-
Size
200KB
-
MD5
fc80951e65ba38b71ff45ab23e7c49b3
-
SHA1
9998e37a0b71bac675eac3b681103a5bf9323492
-
SHA256
89e81929e31df67d102b97bf1b3cd4b2a12a6609cc2f59807cefaf03cce66553
-
SHA512
87a71ac5b8eda919b9ab5375359353746940b80189e7fd38b0de54221929856ce0385f7d5649b71e2dbba55bccd9e744ed4d403ad0effa0c0c1c53a1023e4e06
-
SSDEEP
6144:m9SlSvwslnsn9+JuJbfoL2wVH9eI+NJWb:4vwslnsn9+JuJbfoL2wVH9eIJ
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2