Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
32520f6005d...18.exe
windows7-x64
72520f6005d...18.exe
windows10-2004-x64
7$DESKTOP/P...ne.jad
windows7-x64
3$DESKTOP/P...ne.jad
windows10-2004-x64
3$DESKTOP/P...ne.jad
windows7-x64
3$DESKTOP/P...ne.jad
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/inetc.dll
windows7-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
3PassMem.chm
windows7-x64
1PassMem.chm
windows10-2004-x64
1PassMem.exe
windows7-x64
1PassMem.exe
windows10-2004-x64
1UpdateApp.exe
windows7-x64
1UpdateApp.exe
windows10-2004-x64
1General
-
Target
2520f6005dd43203190a230828793f17_JaffaCakes118
-
Size
1.1MB
-
Sample
240508-q3wlzshg95
-
MD5
2520f6005dd43203190a230828793f17
-
SHA1
8df5c6d216e65e8c1bedf5e48979577a2569b909
-
SHA256
21557ee16033865aae503b34894ffac3d921f6f17a4b1f11ca926092b315fde4
-
SHA512
cd7bf81664c63a95c20122cd6214d38ee8e209380ab1ef23d4cd9b5cfc9cf83eac12310a336351479cc6ac8c0260d223121b614f980fee33979dba4e36952c52
-
SSDEEP
24576:1/H+4Y7fiW786nfOaku/Sroy91+pNX8C5S+qud3s6u:VMaWQ6nfOafSL91+H8qLqdR
Static task
static1
Behavioral task
behavioral1
Sample
2520f6005dd43203190a230828793f17_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2520f6005dd43203190a230828793f17_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
$DESKTOP/PassMemPhone.jad
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
$DESKTOP/PassMemPhone.jad
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
$DESKTOP/PassMemPhone.jad
Resource
win7-20240419-en
Behavioral task
behavioral6
Sample
$DESKTOP/PassMemPhone.jad
Resource
win10v2004-20240419-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240419-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/inetc.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
PassMem.chm
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
PassMem.chm
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
PassMem.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
PassMem.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
UpdateApp.exe
Resource
win7-20240220-en
Behavioral task
behavioral18
Sample
UpdateApp.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2520f6005dd43203190a230828793f17_JaffaCakes118
-
Size
1.1MB
-
MD5
2520f6005dd43203190a230828793f17
-
SHA1
8df5c6d216e65e8c1bedf5e48979577a2569b909
-
SHA256
21557ee16033865aae503b34894ffac3d921f6f17a4b1f11ca926092b315fde4
-
SHA512
cd7bf81664c63a95c20122cd6214d38ee8e209380ab1ef23d4cd9b5cfc9cf83eac12310a336351479cc6ac8c0260d223121b614f980fee33979dba4e36952c52
-
SSDEEP
24576:1/H+4Y7fiW786nfOaku/Sroy91+pNX8C5S+qud3s6u:VMaWQ6nfOafSL91+H8qLqdR
Score7/10-
Loads dropped DLL
-
-
-
Target
$DESKTOP/PassMemPhone.jad
-
Size
278B
-
MD5
40d997c13a2ba3bb6652f8a60df57f7d
-
SHA1
7c8eeb01465f6644eb27b263830e1154162e3edc
-
SHA256
e5a2012bbca0caa52c49d9db48736e8a922a6205d5dbae5618421e7b524c0cc0
-
SHA512
cc7540333eb1fe267842fdabd0d3a78ba918b54fba6a0bf09a0c9b6d62b82fcce5e7341dbe32c2a7cc88791a6a9d2f34dc8efaef394176977586b3f8cdff9eab
Score3/10 -
-
-
Target
$DESKTOP/PassMemPhone.jar
-
Size
83KB
-
MD5
9e27eb570f5b14179ea4f29e2af9b74d
-
SHA1
257f42392a8d1021abc7ee9e9865fe32c25a5f03
-
SHA256
8b9d763bc771be71b34435e2df2f0c6321647f3081778550a6b7e5efe8ce9863
-
SHA512
5f9a4f3a420a4d2cb551918180b9726731f70777dac7d19e7b805296306431fa040f260177fe505dec370a2f23931de23fbb9678622dcb59c0dc3f267b6596c7
-
SSDEEP
1536:EQSnDIJq1wKDx+MrmM+8/ZhNUktotpxmdP6lWaoOxXKXIn9vc/Ex/eUr:E7DIgCK/NZhNU66guXOIna8QUr
Score3/10 -
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
15KB
-
MD5
89351a0a6a89519c86c5531e20dab9ea
-
SHA1
9e801aaaae9e70d8f7fc52f6f12cedc55e4c8a00
-
SHA256
f530069ef87a1c163c4fd63a3d5b053420ce3d7a98739c70211b4a99f90d6277
-
SHA512
13168fa828b581383e5f64d3b54be357e98d2eb9362b45685e7426ffc2f0696ab432cc8a3f374ce8abd03c096f1662d954877afa886fc4aa74709e6044b75c08
-
SSDEEP
384:/MnT0MKT/Xwr2izZQ86mpAT8F9lN8Ov0J:EQMKzwTFnVX8i0
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
bf712f32249029466fa86756f5546950
-
SHA1
75ac4dc4808ac148ddd78f6b89a51afbd4091c2e
-
SHA256
7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af
-
SHA512
13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4
-
SSDEEP
192:0N2gQuUwXzioj4KALV2upWzVd7q1QDXEbBZ8KxHdGzyS/Kx:rJoiO8V2upW7vQjS/
Score3/10 -
-
-
Target
$PLUGINSDIR/inetc.dll
-
Size
24KB
-
MD5
1fc1fbb2c7a14b7901fc9abbd6dbef10
-
SHA1
4d9ed86f31075a3d3f674ff78f39c190a4098126
-
SHA256
4f26394c93f1acb315c42c351983dafc7f094b2d05db6d7a1ba7dcb39a3a599e
-
SHA512
76d8ff7fc301cc5ff966ad8be17f0f3f2d869ef797c5a2c55a062305c02133a842906448741bf9818ec369bbb2932b9a9c2193ebc59835b50e8703db0090fdb2
-
SSDEEP
384:ya3Bj/GAqvdXP4P4IVlht8zNHxKNSJvor9e9dQTIHzOZwceyeZwd6TJdpq:yRtqLhtqKNS5sAvQTIB86T0
Score3/10 -
-
-
Target
PassMem.chm
-
Size
117KB
-
MD5
39bc516ea5c67b140ceb2cf3d0950732
-
SHA1
f89ff77341529d552d9cc710538ffe9313c49b79
-
SHA256
e4be2244bf709df21804413c909e5472f45c0059fa043c89157d8405fa4690b8
-
SHA512
2b73d6f4571ad072029ec1ca23bf1f89566a2362f8d2d0c4db54afcf867a98a320209274a8ec0ac0ec6b657fd1a8709cc9b86a3f88d51820ce4a1fa987bad373
-
SSDEEP
3072:TIxMbqrpz4193zLZ+VcmnGp4AkphvhNdhVy5tJBUn/cg:TIqbqrpzS3XYVcl4BhNfI5FUkg
Score1/10 -
-
-
Target
PassMem.exe
-
Size
2.5MB
-
MD5
5faba77e2dd9d939600a9dfcd48294f9
-
SHA1
74c4b0838dfc3cfe121a343254eee455960d76d9
-
SHA256
401c58335c1b631eca3bfd89ec5ce404274446806645a6010713f9181f145695
-
SHA512
348c86b7d3197424f9a1d9710db6d4bf362cc643c635e5b88dc1d5cadccd1cbda7d371ed6ec9924c6de04dbc7e81f960ec71072d9420d91b938e77370322c972
-
SSDEEP
49152:MVgYwDdW5ed8o7BG+Gwy+uSW1PVCGRT90M0IykS9iG9UHOZ:M6dW5To7Y+Gwy+uSQ590M0IykS9iGUu
Score1/10 -
-
-
Target
UpdateApp.exe
-
Size
327KB
-
MD5
dd3f55f51b18813dcadf40b2690bb9fd
-
SHA1
81699d1641af3e2218350f9d26feefc8c2dcf991
-
SHA256
3012adea80c90e5fabb0dc794d6bd0bd6a8be1076d2a7381c56af952bc750be5
-
SHA512
a2de0aca5e53dd15a5e69283bce285d5d36f1e5d0af08965437ab90a0e2cc33e9bdf7d3fa79984f47b925cc963a35156bd232b915b987ee3c2785a8d960df40a
-
SSDEEP
3072:DOtBlrzu2WI0OHzHtBlrzu2WI0OHzumg9ytBlrzu2WI0OHz:Dqnzu2WITnzu2WIc30nzu2WI
Score1/10 -