Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

e2b2b461ef...18.exe

windows7-x64

7

e2b2b461ef...18.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...nz.dll

windows7-x64

3

$PLUGINSDI...nz.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e2b2b461ef124f52ef12a3fa2e144a41_JaffaCakes118

  • Size

    581KB

  • Sample

    240406-rckmgabh7v

  • MD5

    e2b2b461ef124f52ef12a3fa2e144a41

  • SHA1

    48ba8b2527bd54c3906fba0246030214fe270a50

  • SHA256

    21b53879aedb257069ae1cbe5783ab06e8832d51f8a36117abd04d4a4b026be7

  • SHA512

    60c79f82c09724fbe978022701c3b2a75d1f615e5ccc1eed5f54e419fb899a98794eb30237fdb77f28c79768ce04ba748f61cdf8cc6092f49122e4e26f0620f0

  • SSDEEP

    12288:zt4hUnM8rC6ibkVAw9gPdR0YaFYponURzneJOYLT5go9Gl1:zt4hmjrebk29PdR0Kponczne4W5a

Score
7/10

Malware Config

Targets

    • Target

      e2b2b461ef124f52ef12a3fa2e144a41_JaffaCakes118

    • Size

      581KB

    • MD5

      e2b2b461ef124f52ef12a3fa2e144a41

    • SHA1

      48ba8b2527bd54c3906fba0246030214fe270a50

    • SHA256

      21b53879aedb257069ae1cbe5783ab06e8832d51f8a36117abd04d4a4b026be7

    • SHA512

      60c79f82c09724fbe978022701c3b2a75d1f615e5ccc1eed5f54e419fb899a98794eb30237fdb77f28c79768ce04ba748f61cdf8cc6092f49122e4e26f0620f0

    • SSDEEP

      12288:zt4hUnM8rC6ibkVAw9gPdR0YaFYponURzneJOYLT5go9Gl1:zt4hmjrebk29PdR0Kponczne4W5a

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/kaxgcem.dll

    • Size

      153KB

    • MD5

      64ffd6dbd03f55408fbc6640317368f0

    • SHA1

      227d86d47d53d5f62a2227e6d2b282519d38005d

    • SHA256

      b8d9b2c53ea62560b03c2ef9f139370380b4c931d1fc02172bc7e1a98e41ffc3

    • SHA512

      ba03c31e00ec24a7bd4e59088feaee3eb389b459cbd041613222f95d9ea1689920127d390d81c2e0000ccf72f67a2043cf81dd324cab3c887003aa93783501c8

    • SSDEEP

      3072:GIM31De7jBYnZRWxnXnCjTDX/+dG/QsSauQ:9M31EzyjTjIGcQ

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsisunz.dll

    • Size

      40KB

    • MD5

      5f13dbc378792f23e598079fc1e4422b

    • SHA1

      5813c05802f15930aa860b8363af2b58426c8adf

    • SHA256

      6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d

    • SHA512

      9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5

    • SSDEEP

      384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4

    Score
    3/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks