Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_b698b8bafffbe7276d9a3c25a4a73bd3
-
Size
130KB
-
Sample
250207-nr6xgazrcl
-
MD5
b698b8bafffbe7276d9a3c25a4a73bd3
-
SHA1
21e2afa4e38484eed7ec0c43d8a743cd8ca011d7
-
SHA256
5c631157cd222fdcb2f60390d7cc2cbe19e32e551d4a11b178fad8760a1cf734
-
SHA512
2b6c7572636fac7e1815778bb02e766cbc5f15a63b55f46570c87826d7c94d6397ed81b9d881ac4a5f7c5caf3253aa3fb42e4e14ceedea0edea07fe75a133c54
-
SSDEEP
3072:A5t15OFp3QKBR+wqVe93Z+0UUyuIDcR3zO0pCfqFzu:qt15OF11R+tw+0UUyuCKpQfk
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_b698b8bafffbe7276d9a3c25a4a73bd3.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_b698b8bafffbe7276d9a3c25a4a73bd3.exe
Resource
win10v2004-20250129-en
Malware Config
Targets
-
-
Target
JaffaCakes118_b698b8bafffbe7276d9a3c25a4a73bd3
-
Size
130KB
-
MD5
b698b8bafffbe7276d9a3c25a4a73bd3
-
SHA1
21e2afa4e38484eed7ec0c43d8a743cd8ca011d7
-
SHA256
5c631157cd222fdcb2f60390d7cc2cbe19e32e551d4a11b178fad8760a1cf734
-
SHA512
2b6c7572636fac7e1815778bb02e766cbc5f15a63b55f46570c87826d7c94d6397ed81b9d881ac4a5f7c5caf3253aa3fb42e4e14ceedea0edea07fe75a133c54
-
SSDEEP
3072:A5t15OFp3QKBR+wqVe93Z+0UUyuIDcR3zO0pCfqFzu:qt15OF11R+tw+0UUyuCKpQfk
-
Blackshades family
-
Blackshades payload
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1