Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f2e659595d7ad7258ce87df5b188c346_JaffaCakes118

  • Size

    335KB

  • Sample

    240416-hbfsfsbd67

  • MD5

    f2e659595d7ad7258ce87df5b188c346

  • SHA1

    51c6a7b3595397e505d8d4f6de8a9835406a3b15

  • SHA256

    1fa7530d96fea5b5ef835a33144726ea2cc3ac31f77a2960a1178921969f2f26

  • SHA512

    539a0c08d24cc21aaa55c69a8f639a54a19a8cd20c421c38ff78f824d8b6b77f5593b981de92b88c5d69474b6d945fd484bdee3aac906400b3400645b67be22c

  • SSDEEP

    6144:p+IOgmrPBHjUYQPa8tuTuzgvWYYLBVZTBlQPUOev/iP7eTFGR2o5l3zw0ABiX3bm:p6g0UxawuTuEv6VrlQi/ESG8ml3CiXS

Score
7/10

Malware Config

Targets

    • Target

      Exstora_v_2.1_en.exe

    • Size

      353KB

    • MD5

      f664e10ef51de723d7170c7582a6a64c

    • SHA1

      2498826984ac35e2f14cc3f1eb46aa1e4a5e8bcb

    • SHA256

      407611842b4b5d14086124cc36b1493354fb57058cddd9b89ea5eed644775c0a

    • SHA512

      6009362c8402efe3c62c6f08a09f125054e69d1575ea4e9b1a108892a2e4bc27e0e970a53b19d8db5d75667fa5e0ce3132537329f08deb50cc42d8b96a357f58

    • SSDEEP

      6144:0X5v0RyNV7ctOXkBeqvX7RUqS0b/PEK80e2f/bCh/jAHdKY:Yv+gBctOXkBTRx/G0Lf/bYA8Y

    Score
    3/10
    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      f62d03fcb1473110e920a9bb2c701006

    • SHA1

      c48444ef2daa60dcdf91f1645cd4ecd8e66545f7

    • SHA256

      17e2f205af12d5a86638dc83c95fc69199c41af2fa6daeb1e91ec330f68c5372

    • SHA512

      701d531d405d08054d53298141d5bbd56e74df7b22bcea5f9f0e5c4407421ea0ca9617aa84e740dc1dc44e6d14e58852c1ca2087213cc2319f2da44eaed0bc05

    • SSDEEP

      192:g6JaVGQ+xI5EeuyvMmGpeWH2J5xprN+AxTxK72dwF7dBdcQOz:g6JaVh4I5rpPbTx+BdhO

    Score
    3/10
    • Target

      Exstora.exe

    • Size

      236KB

    • MD5

      4dd3d86d39f8cfd5bce874f5433da93d

    • SHA1

      347d84a17852298f597a5fcc0656709b73a67d99

    • SHA256

      481f7b11d4538bcc07ac2aef5332b8fc1b1392677aa4f45b3268e3d280799a26

    • SHA512

      2a2636cfed3a1143568f04136d3c4aba4513f458afec82fb391dbef665b52154a84ba4d9667918a0544caf58c3d12d3f3d4d512298c957cbdcafabd1446875cf

    • SSDEEP

      6144:t5efpAvfkL9YvPhMgZOZQxnVQaGoI0Rxc4liy:ife3IYHhMgZQQxnKn0Re4liy

    Score
    1/10
    • Target

      Uninstall.exe

    • Size

      47KB

    • MD5

      0154f3e36b5d217ee63714e80154744b

    • SHA1

      1f7928e142c47cc2cf0903e2b1218112297baecd

    • SHA256

      da0ab9bd50f1e497306971630e2b980cd8d4a79959ca203f15e6e588093a9a3d

    • SHA512

      522874f78cf03ea9a8e60ed0e85856dbb508b903ca2afbc830922185fbc64e0527e2f16abf6d7eaa18750af93353772324125e9ee4aabd715eb1b9e9e2f9708c

    • SSDEEP

      768:A/UpAHiGjRQ1kkjH918xnyzOp7OssT1pF/O71mJ/6gd2iZQAm6kRRS+NoJRnek:0UeHiWRgkkjH8nyWmJCgdLeAyNxk

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Target

      exstora.chm

    • Size

      24KB

    • MD5

      3c728fb3f47981cff02d7d449b255581

    • SHA1

      dd618388a46c90c7b6694e2e48d1523c7df0e915

    • SHA256

      7f7b22635daaa417d9c811407b7cd6792d5db5201226c265e44f4fe1cbfa2d3a

    • SHA512

      437fe04ffda1e77293e3fadfd518ce7517685d9725f5ca719bcda834848290a5eca075feac3aa348bb8595bad71b86cda62805f29f0973422bf73972484af5db

    • SSDEEP

      384:ue5QZX3xSDdzzALeBWE2QyDWiEmaTEjTy77Nq9Tnvm4:uG0hSDdXAWW4pvTE6Vq9Te4

    Score
    1/10
    • Target

      lang.dll

    • Size

      18KB

    • MD5

      ecb92250302d9a7eddc1f1a3d1050abe

    • SHA1

      8060d2f2c4b80741492304809536437155d6025e

    • SHA256

      c17f6701ed72f7b07d4f1f10d296c704cfed86a976b03ccc2dde393ca4e8664f

    • SHA512

      c40fa05da85eaa11f09e71a148ca185b1f279f0348c621782c6fc1023b640b9b8a93435aa10d1ae7def440b2826cd9e704bd1c940e171a5bf46b6f56144debe1

    • SSDEEP

      192:m6WsO841R5bqmoRaruguapjqV2rPOUCzFpjoH:m6w1LERodpj+2rPOzRp0

    Score
    1/10
    • Target

      新云软件.url

    • Size

      133B

    • MD5

      4f0017b3b346bd0626f0c3b915e6e734

    • SHA1

      823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92

    • SHA256

      df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678

    • SHA512

      0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks