Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
117fb58f5dbe646a53372924499de840_JaffaCakes118
-
Size
1022KB
-
Sample
241004-c6xfsstgmc
-
MD5
117fb58f5dbe646a53372924499de840
-
SHA1
14c122e9e88dd960baa8e52d3bde672e333dcd44
-
SHA256
31a49abd1c2b407df1b5dca7766a31725fe1f5ae0b73dc6e2f22b36e24d79bf8
-
SHA512
447bef79933d038dd3d4a487253a0fa5eaa6ff119b6abfd32af5a499eaffefb4aa0a795232fe01b01234e947257b00ce83adbb7bdc238d912559e81e6866d1ba
-
SSDEEP
12288:siNTF7cP+H6WA5uYY11WjIYjs3mWvgILI/I0qXxd4xNLn9Kg/zfgFah8/M9:39Zcu6lUzyq2WvgHqfend/Lg0h7
Static task
static1
Behavioral task
behavioral1
Sample
117fb58f5dbe646a53372924499de840_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
117fb58f5dbe646a53372924499de840_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
117fb58f5dbe646a53372924499de840_JaffaCakes118
-
Size
1022KB
-
MD5
117fb58f5dbe646a53372924499de840
-
SHA1
14c122e9e88dd960baa8e52d3bde672e333dcd44
-
SHA256
31a49abd1c2b407df1b5dca7766a31725fe1f5ae0b73dc6e2f22b36e24d79bf8
-
SHA512
447bef79933d038dd3d4a487253a0fa5eaa6ff119b6abfd32af5a499eaffefb4aa0a795232fe01b01234e947257b00ce83adbb7bdc238d912559e81e6866d1ba
-
SSDEEP
12288:siNTF7cP+H6WA5uYY11WjIYjs3mWvgILI/I0qXxd4xNLn9Kg/zfgFah8/M9:39Zcu6lUzyq2WvgHqfend/Lg0h7
Score9/10-
Checks for common network interception software
Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
-
Enumerates VirtualBox registry keys
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1