Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
37a2938ebdb440618eace9b28e4448a3_JaffaCakes118
-
Size
404KB
-
Sample
241012-a4rfnaxfkl
-
MD5
37a2938ebdb440618eace9b28e4448a3
-
SHA1
9e6a00c467aaf5aec11d3be518fa787b22d594ad
-
SHA256
6191cb1591ca0e52a2cd24eca976e7264df7ae02b29513c03c4187abdc865f8a
-
SHA512
63326f12b1edd851a11eec4eeaeb0542448d83eafc7678c4796ef81cd7fddaf4ca7e564321c034e2a7c323a6d4beb7af1ec29c0aeda0aae6da7bc54782ea02e0
-
SSDEEP
12288:+Ze3HfZsanlgvRrHQApEgZeeGaCa7227W:+Zk/OTh9G1a7F7W
Static task
static1
Behavioral task
behavioral1
Sample
37a2938ebdb440618eace9b28e4448a3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
37a2938ebdb440618eace9b28e4448a3_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
37a2938ebdb440618eace9b28e4448a3_JaffaCakes118
-
Size
404KB
-
MD5
37a2938ebdb440618eace9b28e4448a3
-
SHA1
9e6a00c467aaf5aec11d3be518fa787b22d594ad
-
SHA256
6191cb1591ca0e52a2cd24eca976e7264df7ae02b29513c03c4187abdc865f8a
-
SHA512
63326f12b1edd851a11eec4eeaeb0542448d83eafc7678c4796ef81cd7fddaf4ca7e564321c034e2a7c323a6d4beb7af1ec29c0aeda0aae6da7bc54782ea02e0
-
SSDEEP
12288:+Ze3HfZsanlgvRrHQApEgZeeGaCa7227W:+Zk/OTh9G1a7F7W
Score10/10-
Disables taskbar notifications via registry modification
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
3Disable or Modify Tools
3Modify Registry
5