Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_007142e36b605255da4e8e4b67dd2920
-
Size
76KB
-
Sample
241231-cglyrs1mhs
-
MD5
007142e36b605255da4e8e4b67dd2920
-
SHA1
777924ff325f636c32a08484ab10747176f9fe9f
-
SHA256
3fbc72f5324661d5f3c9474176885804bd6f6faf717375940365f26b4cdb9ccf
-
SHA512
af6a2b2a5dfd9eced4e0fd8ba13d428b4e1d98570458e08319eca75d63c982c32fb9fa80c778abcf1b2c4b39ffba602231b16c95afa3e39d45472726828fc82f
-
SSDEEP
1536:aP57js/z+6RGU219a8G6MByg5t6c0uiNlgZnc6oXc+OAOKbVH:aPRkXQGJ50ckNlPXc+vd
Behavioral task
behavioral1
Sample
JaffaCakes118_007142e36b605255da4e8e4b67dd2920.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_007142e36b605255da4e8e4b67dd2920.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
JaffaCakes118_007142e36b605255da4e8e4b67dd2920
-
Size
76KB
-
MD5
007142e36b605255da4e8e4b67dd2920
-
SHA1
777924ff325f636c32a08484ab10747176f9fe9f
-
SHA256
3fbc72f5324661d5f3c9474176885804bd6f6faf717375940365f26b4cdb9ccf
-
SHA512
af6a2b2a5dfd9eced4e0fd8ba13d428b4e1d98570458e08319eca75d63c982c32fb9fa80c778abcf1b2c4b39ffba602231b16c95afa3e39d45472726828fc82f
-
SSDEEP
1536:aP57js/z+6RGU219a8G6MByg5t6c0uiNlgZnc6oXc+OAOKbVH:aPRkXQGJ50ckNlPXc+vd
-
Sality family
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Modifies Windows Firewall
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
4Disable or Modify System Firewall
1Disable or Modify Tools
3Modify Registry
4