Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_9235835d67d9fe459b8e009d501784b7
-
Size
194KB
-
Sample
250117-vqng3axmgy
-
MD5
9235835d67d9fe459b8e009d501784b7
-
SHA1
6a0725b7b93452bc880eedf6a858fb46ad77ae6b
-
SHA256
1ce012c3a37cbfc3bbd0872cc5b0a9cec916ffeb612327f7a4da9b505a53404d
-
SHA512
b526ea6eab7dc95032182d46125ee2729f1ec91faf8ef2fc831dabd3673070d466692b6490b1f9bb35db4ae7312fb6b5990dee1e07f8a5b50ca0e380d24eebb0
-
SSDEEP
3072:nZyZ/e5K4ql2Tp9diLrSy031h9kPhwuvTAYNqGWyDNFfDf:nZyZvPedarSy2v9WpmnyDNF
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_9235835d67d9fe459b8e009d501784b7.exe
Resource
win11-20241007-en
Malware Config
Targets
-
-
Target
JaffaCakes118_9235835d67d9fe459b8e009d501784b7
-
Size
194KB
-
MD5
9235835d67d9fe459b8e009d501784b7
-
SHA1
6a0725b7b93452bc880eedf6a858fb46ad77ae6b
-
SHA256
1ce012c3a37cbfc3bbd0872cc5b0a9cec916ffeb612327f7a4da9b505a53404d
-
SHA512
b526ea6eab7dc95032182d46125ee2729f1ec91faf8ef2fc831dabd3673070d466692b6490b1f9bb35db4ae7312fb6b5990dee1e07f8a5b50ca0e380d24eebb0
-
SSDEEP
3072:nZyZ/e5K4ql2Tp9diLrSy031h9kPhwuvTAYNqGWyDNFfDf:nZyZvPedarSy2v9WpmnyDNF
Score8/10-
Modifies Shared Task Scheduler registry keys
-
A potential corporate email address has been identified in the URL: [email protected]
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Browser Extensions
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1