Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...f0.exe

windows7-x64

10

JaffaCakes...f0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_11c304957fc4b805c5a5f17a3d1b5cf0

  • Size

    755KB

  • Sample

    250221-lmj6ssyldx

  • MD5

    11c304957fc4b805c5a5f17a3d1b5cf0

  • SHA1

    dacc4390a016d2dcb7289c54ec16840110820e15

  • SHA256

    1c2e4a6ee6e9c9fdd1e97b1b51054d3e3e330f606d58a29e2587ba99edf54c6c

  • SHA512

    95bdff41207e7a02152f82540fbfc2eba846c23a6aa1965c68fbb5b565d3ec3be40b3dc9e156d7d616576aaec8f6ea2a59772a218f9e4152b000403a26b26aa1

  • SSDEEP

    12288:yoxejOONAM7GUC1Jr+4o628gx2Jw+tP3Jzm8JOCHXC3X+pd167QhEQO:hxY3NtGUmJr+4Obxd+tPZSZiiE6EhE

Score
10/10
fakeavdiscoveryfakeavpersistencespyware

Malware Config

Targets

    • Target

      JaffaCakes118_11c304957fc4b805c5a5f17a3d1b5cf0

    • Size

      755KB

    • MD5

      11c304957fc4b805c5a5f17a3d1b5cf0

    • SHA1

      dacc4390a016d2dcb7289c54ec16840110820e15

    • SHA256

      1c2e4a6ee6e9c9fdd1e97b1b51054d3e3e330f606d58a29e2587ba99edf54c6c

    • SHA512

      95bdff41207e7a02152f82540fbfc2eba846c23a6aa1965c68fbb5b565d3ec3be40b3dc9e156d7d616576aaec8f6ea2a59772a218f9e4152b000403a26b26aa1

    • SSDEEP

      12288:yoxejOONAM7GUC1Jr+4o628gx2Jw+tP3Jzm8JOCHXC3X+pd167QhEQO:hxY3NtGUmJr+4Obxd+tPZSZiiE6EhE

    Score
    10/10
    fakeavdiscoveryfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Fakeav family

      fakeav

    • FakeAV payload

      fakeavspyware

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks