Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3e8258608e61b7522dea43bd8eaf5ef8_JaffaCakes118
-
Size
220KB
-
Sample
241013-h33rasvbne
-
MD5
3e8258608e61b7522dea43bd8eaf5ef8
-
SHA1
bae6f7f5321184fb4cfe73a4e081783e986392a1
-
SHA256
ed868c281d9ecc6f7440b3d91e4f34a471f773ade390c7b2732465fdadc7f797
-
SHA512
d28507fc1e3a4ac9734a73e6b7c6802d4619eee1ff13a9970cbcfd84f1e8ffbcabe0a9f748121e8a040838e10ecdcc2dff255314f88f455d74b4030df53eabd8
-
SSDEEP
3072:rm/nmS99vs6v5gVzaSCzJ0rJOz01JW69b4Z5qK:onmS9l1gzRa0B4yK
Static task
static1
Behavioral task
behavioral1
Sample
3e8258608e61b7522dea43bd8eaf5ef8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3e8258608e61b7522dea43bd8eaf5ef8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
3e8258608e61b7522dea43bd8eaf5ef8_JaffaCakes118
-
Size
220KB
-
MD5
3e8258608e61b7522dea43bd8eaf5ef8
-
SHA1
bae6f7f5321184fb4cfe73a4e081783e986392a1
-
SHA256
ed868c281d9ecc6f7440b3d91e4f34a471f773ade390c7b2732465fdadc7f797
-
SHA512
d28507fc1e3a4ac9734a73e6b7c6802d4619eee1ff13a9970cbcfd84f1e8ffbcabe0a9f748121e8a040838e10ecdcc2dff255314f88f455d74b4030df53eabd8
-
SSDEEP
3072:rm/nmS99vs6v5gVzaSCzJ0rJOz01JW69b4Z5qK:onmS9l1gzRa0B4yK
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2