Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2f49e81e12f8e03eac1362cb491875f2_JaffaCakes118
-
Size
166KB
-
Sample
241009-l9q8maycjl
-
MD5
2f49e81e12f8e03eac1362cb491875f2
-
SHA1
9248d06d2425e5fa927eaa809571b5222dd66050
-
SHA256
dc03f70f5ae9bc22cc985574d7175c4793644c01f68f18400284c8a9508e016e
-
SHA512
92273eac59cbeabc7dd0c2aee2bd9e0c7518be9b07d121310a43bcd078f70c3a3c510a6682bc887dbff3991ac2344932d6f137208ba7d061d680ff11ebadf952
-
SSDEEP
3072:SuPl19U+pzDsZbbGs4SVhfGsysaro7YRl4hWUGjLpbenenbj:SA19UMzQZbbGshVhfGscLRlqWrfte8
Behavioral task
behavioral1
Sample
2f49e81e12f8e03eac1362cb491875f2_JaffaCakes118.exe
Resource
win7-20240708-en
Malware Config
Targets
-
-
Target
2f49e81e12f8e03eac1362cb491875f2_JaffaCakes118
-
Size
166KB
-
MD5
2f49e81e12f8e03eac1362cb491875f2
-
SHA1
9248d06d2425e5fa927eaa809571b5222dd66050
-
SHA256
dc03f70f5ae9bc22cc985574d7175c4793644c01f68f18400284c8a9508e016e
-
SHA512
92273eac59cbeabc7dd0c2aee2bd9e0c7518be9b07d121310a43bcd078f70c3a3c510a6682bc887dbff3991ac2344932d6f137208ba7d061d680ff11ebadf952
-
SSDEEP
3072:SuPl19U+pzDsZbbGs4SVhfGsysaro7YRl4hWUGjLpbenenbj:SA19UMzQZbbGshVhfGscLRlqWrfte8
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1