Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
267cf62f10625f64f8fd7310c9c4fbab_JaffaCakes118
-
Size
45KB
-
Sample
241008-2hxjbstgpl
-
MD5
267cf62f10625f64f8fd7310c9c4fbab
-
SHA1
b35ab0d3d2c8944ec3ca6fa99af9d0cb458c6333
-
SHA256
a24612ef3031b5253d0b28b31fd2ded73c32885131fade434e069d0fe0f20ef8
-
SHA512
ed9a96cc852436f79b5434a2e2fef8644468281bd36b81b891182ac0ed16fdb0cd5014295d1214c5203142479d496c4cdd67cf9f83fb1556b9d1d61947200103
-
SSDEEP
192:6cNhCefrVvNzFCTr312vkWl92NGossJ608vp:68HfrVFaZ3i2MosK6dB
Static task
static1
Behavioral task
behavioral1
Sample
267cf62f10625f64f8fd7310c9c4fbab_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
267cf62f10625f64f8fd7310c9c4fbab_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
267cf62f10625f64f8fd7310c9c4fbab_JaffaCakes118
-
Size
45KB
-
MD5
267cf62f10625f64f8fd7310c9c4fbab
-
SHA1
b35ab0d3d2c8944ec3ca6fa99af9d0cb458c6333
-
SHA256
a24612ef3031b5253d0b28b31fd2ded73c32885131fade434e069d0fe0f20ef8
-
SHA512
ed9a96cc852436f79b5434a2e2fef8644468281bd36b81b891182ac0ed16fdb0cd5014295d1214c5203142479d496c4cdd67cf9f83fb1556b9d1d61947200103
-
SSDEEP
192:6cNhCefrVvNzFCTr312vkWl92NGossJ608vp:68HfrVFaZ3i2MosK6dB
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-