Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
252a53eb823139352a705180bedc5a37_JaffaCakes118
-
Size
429KB
-
Sample
241008-zg7lssycjb
-
MD5
252a53eb823139352a705180bedc5a37
-
SHA1
65e72461f8b718ce73bd7a635f8bea5a9bff957f
-
SHA256
ad14a052c2469e5886bf81e18da365ae954411a90f30b538fe33b08eef94f9a7
-
SHA512
0f62b3c1522d63137f5ad81b3ddea8c5e3e274fdc21863051c70d930d59e1d5d0ac9e808e63dfa24633f988ea655fc95ab6c2b173d93fd44042a03a1fff42b2d
-
SSDEEP
6144:QXEMSTj/tYm+zoED78n9vOg4N45R44Oel7QAA3CkKXBBeng2HgFUwrnKbZ:1Ff/6z0Oh45C4OelsQPGHgLnS
Static task
static1
Behavioral task
behavioral1
Sample
252a53eb823139352a705180bedc5a37_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
252a53eb823139352a705180bedc5a37_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
252a53eb823139352a705180bedc5a37_JaffaCakes118
-
Size
429KB
-
MD5
252a53eb823139352a705180bedc5a37
-
SHA1
65e72461f8b718ce73bd7a635f8bea5a9bff957f
-
SHA256
ad14a052c2469e5886bf81e18da365ae954411a90f30b538fe33b08eef94f9a7
-
SHA512
0f62b3c1522d63137f5ad81b3ddea8c5e3e274fdc21863051c70d930d59e1d5d0ac9e808e63dfa24633f988ea655fc95ab6c2b173d93fd44042a03a1fff42b2d
-
SSDEEP
6144:QXEMSTj/tYm+zoED78n9vOg4N45R44Oel7QAA3CkKXBBeng2HgFUwrnKbZ:1Ff/6z0Oh45C4OelsQPGHgLnS
Score8/10-
Blocklisted process makes network request
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Browser Extensions
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1