Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
dd80303d95f1ec69deafcb82ce3e533b_JaffaCakes118
-
Size
140KB
-
Sample
241210-hk8vlaxmbv
-
MD5
dd80303d95f1ec69deafcb82ce3e533b
-
SHA1
9be0924bea4eda2d1ba045f68ea4f7d227217326
-
SHA256
e5b09940690b8eada0312c245afaafbbbb8abe2d406bd081aace44418a0b89e3
-
SHA512
3494ccd5b836d5898b7c97d28476a6b50a3caf8b2cd3ddcf9f8c17fa2a4e9ce985b46889086fbd3c9a0c12ecd2844240701755444f7c1e891ce7061aacdf5e0a
-
SSDEEP
3072:e/fl/oknFJY8olzQjnGiLsI74BaoviZUnJod6elDGkuRjzW:9t9zCnGiLsI74NiiJozEkuR2
Static task
static1
Behavioral task
behavioral1
Sample
dd80303d95f1ec69deafcb82ce3e533b_JaffaCakes118.exe
Resource
win7-20241023-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
dd80303d95f1ec69deafcb82ce3e533b_JaffaCakes118
-
Size
140KB
-
MD5
dd80303d95f1ec69deafcb82ce3e533b
-
SHA1
9be0924bea4eda2d1ba045f68ea4f7d227217326
-
SHA256
e5b09940690b8eada0312c245afaafbbbb8abe2d406bd081aace44418a0b89e3
-
SHA512
3494ccd5b836d5898b7c97d28476a6b50a3caf8b2cd3ddcf9f8c17fa2a4e9ce985b46889086fbd3c9a0c12ecd2844240701755444f7c1e891ce7061aacdf5e0a
-
SSDEEP
3072:e/fl/oknFJY8olzQjnGiLsI74BaoviZUnJod6elDGkuRjzW:9t9zCnGiLsI74NiiJozEkuR2
-
Sality family
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
3Disable or Modify Tools
3Modify Registry
4