Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

JaffaCakes...d5.exe

windows7-x64

10

JaffaCakes...d5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_2a1fcaa75d27181832db1a57ac78fdd5

  • Size

    204KB

  • Sample

    250106-sd1whs1qfp

  • MD5

    2a1fcaa75d27181832db1a57ac78fdd5

  • SHA1

    7181de60f98476d66ec834ebd7f487105c19ed43

  • SHA256

    aab5338df8f02cc24150b634d3cb6721e42fe28ccab7f95ab4f21803ed0ad7f0

  • SHA512

    cd522962166ad850e3bca969c80a98d13aa66dff8840ed16791c6a98f201f0781ae24dc42204ec4ac778059f6849a7b6793bd51d1f8a80eea55b9586a9bf947f

  • SSDEEP

    3072:3Hjk+0oLnWFnzBHv/xWFsg8WatFBGFVWPE5ac0pG/1z+QVMbg1:Xo/BHng5HaVG4G/1z+QVMbg1

Score
10/10
vobfusdiscoverypersistenceworm

Malware Config

Targets

    • Target

      JaffaCakes118_2a1fcaa75d27181832db1a57ac78fdd5

    • Size

      204KB

    • MD5

      2a1fcaa75d27181832db1a57ac78fdd5

    • SHA1

      7181de60f98476d66ec834ebd7f487105c19ed43

    • SHA256

      aab5338df8f02cc24150b634d3cb6721e42fe28ccab7f95ab4f21803ed0ad7f0

    • SHA512

      cd522962166ad850e3bca969c80a98d13aa66dff8840ed16791c6a98f201f0781ae24dc42204ec4ac778059f6849a7b6793bd51d1f8a80eea55b9586a9bf947f

    • SSDEEP

      3072:3Hjk+0oLnWFnzBHv/xWFsg8WatFBGFVWPE5ac0pG/1z+QVMbg1:Xo/BHng5HaVG4G/1z+QVMbg1

    Score
    10/10
    vobfusdiscoverypersistenceworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Vobfus family

      vobfus

    • Adds policy Run key to start application

      persistence

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks