Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ff0ba30bf984ab9528b4f7a3e836b852_JaffaCakes118
-
Size
731KB
-
Sample
240929-way5asxdkd
-
MD5
ff0ba30bf984ab9528b4f7a3e836b852
-
SHA1
2c95aefbfb20ab29a236767bc8b6ca50bbd3fbc3
-
SHA256
a2d387ed3b20b3b7c3a46936e296a2ee1c7efdc2c726f669e4d9c23cd135a3ee
-
SHA512
2a54b9ee3a22bdc936b7976a23726ac7c8aed56d1933a8f1933a05b545ca67ce0e56c545059ae5f478f0279aa538b7310394ccf7624e6646cb71204c4133a87f
-
SSDEEP
12288:Jaingtd/9iCpVEZxzraxdUdpmeFmjnDgGeIttwoPR5pWZhAIRXHYnrmJ:JaigD/ArravUdsewnlFttwYQRXHYrmJ
Static task
static1
Behavioral task
behavioral1
Sample
ff0ba30bf984ab9528b4f7a3e836b852_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ff0ba30bf984ab9528b4f7a3e836b852_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
ff0ba30bf984ab9528b4f7a3e836b852_JaffaCakes118
-
Size
731KB
-
MD5
ff0ba30bf984ab9528b4f7a3e836b852
-
SHA1
2c95aefbfb20ab29a236767bc8b6ca50bbd3fbc3
-
SHA256
a2d387ed3b20b3b7c3a46936e296a2ee1c7efdc2c726f669e4d9c23cd135a3ee
-
SHA512
2a54b9ee3a22bdc936b7976a23726ac7c8aed56d1933a8f1933a05b545ca67ce0e56c545059ae5f478f0279aa538b7310394ccf7624e6646cb71204c4133a87f
-
SSDEEP
12288:Jaingtd/9iCpVEZxzraxdUdpmeFmjnDgGeIttwoPR5pWZhAIRXHYnrmJ:JaigD/ArravUdsewnlFttwYQRXHYrmJ
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1