Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

1413cd0bbb...18.exe

windows7-x64

7

1413cd0bbb...18.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...nz.dll

windows7-x64

3

$PLUGINSDI...nz.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1413cd0bbb050dc0805d78ad1ec14bd7_JaffaCakes118

  • Size

    581KB

  • Sample

    240504-xrt3caag43

  • MD5

    1413cd0bbb050dc0805d78ad1ec14bd7

  • SHA1

    06195de2c8dcb6910dfe0a4a9911b27ff0beb881

  • SHA256

    d664f449292cba95827bf59bb21e36e7893ef368da432008b837934c65286f4c

  • SHA512

    300293dfbf05025749e8bf23bf48129fcc3002d7870c380a8d9f68f7c7a01f1acc47fb6efa203eee0d2e089c61308227673fc1aa74deb1b26f263bd0e035617d

  • SSDEEP

    12288:WU4hUnM8rC6ibkVAw9gPdR0YaFYponURzneJOYLT5go9GlJ:WU4hmjrebk29PdR0Kponczne4W58

Score
7/10

Malware Config

Targets

    • Target

      1413cd0bbb050dc0805d78ad1ec14bd7_JaffaCakes118

    • Size

      581KB

    • MD5

      1413cd0bbb050dc0805d78ad1ec14bd7

    • SHA1

      06195de2c8dcb6910dfe0a4a9911b27ff0beb881

    • SHA256

      d664f449292cba95827bf59bb21e36e7893ef368da432008b837934c65286f4c

    • SHA512

      300293dfbf05025749e8bf23bf48129fcc3002d7870c380a8d9f68f7c7a01f1acc47fb6efa203eee0d2e089c61308227673fc1aa74deb1b26f263bd0e035617d

    • SSDEEP

      12288:WU4hUnM8rC6ibkVAw9gPdR0YaFYponURzneJOYLT5go9GlJ:WU4hmjrebk29PdR0Kponczne4W58

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/kaxgcem.dll

    • Size

      153KB

    • MD5

      64ffd6dbd03f55408fbc6640317368f0

    • SHA1

      227d86d47d53d5f62a2227e6d2b282519d38005d

    • SHA256

      b8d9b2c53ea62560b03c2ef9f139370380b4c931d1fc02172bc7e1a98e41ffc3

    • SHA512

      ba03c31e00ec24a7bd4e59088feaee3eb389b459cbd041613222f95d9ea1689920127d390d81c2e0000ccf72f67a2043cf81dd324cab3c887003aa93783501c8

    • SSDEEP

      3072:GIM31De7jBYnZRWxnXnCjTDX/+dG/QsSauQ:9M31EzyjTjIGcQ

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsisunz.dll

    • Size

      40KB

    • MD5

      5f13dbc378792f23e598079fc1e4422b

    • SHA1

      5813c05802f15930aa860b8363af2b58426c8adf

    • SHA256

      6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d

    • SHA512

      9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5

    • SSDEEP

      384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4

    Score
    3/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks