Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2520f6005dd43203190a230828793f17_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240508-q3wlzshg95

  • MD5

    2520f6005dd43203190a230828793f17

  • SHA1

    8df5c6d216e65e8c1bedf5e48979577a2569b909

  • SHA256

    21557ee16033865aae503b34894ffac3d921f6f17a4b1f11ca926092b315fde4

  • SHA512

    cd7bf81664c63a95c20122cd6214d38ee8e209380ab1ef23d4cd9b5cfc9cf83eac12310a336351479cc6ac8c0260d223121b614f980fee33979dba4e36952c52

  • SSDEEP

    24576:1/H+4Y7fiW786nfOaku/Sroy91+pNX8C5S+qud3s6u:VMaWQ6nfOafSL91+H8qLqdR

Score
7/10

Malware Config

Targets

    • Target

      2520f6005dd43203190a230828793f17_JaffaCakes118

    • Size

      1.1MB

    • MD5

      2520f6005dd43203190a230828793f17

    • SHA1

      8df5c6d216e65e8c1bedf5e48979577a2569b909

    • SHA256

      21557ee16033865aae503b34894ffac3d921f6f17a4b1f11ca926092b315fde4

    • SHA512

      cd7bf81664c63a95c20122cd6214d38ee8e209380ab1ef23d4cd9b5cfc9cf83eac12310a336351479cc6ac8c0260d223121b614f980fee33979dba4e36952c52

    • SSDEEP

      24576:1/H+4Y7fiW786nfOaku/Sroy91+pNX8C5S+qud3s6u:VMaWQ6nfOafSL91+H8qLqdR

    Score
    7/10
    • Loads dropped DLL

    • Target

      $DESKTOP/PassMemPhone.jad

    • Size

      278B

    • MD5

      40d997c13a2ba3bb6652f8a60df57f7d

    • SHA1

      7c8eeb01465f6644eb27b263830e1154162e3edc

    • SHA256

      e5a2012bbca0caa52c49d9db48736e8a922a6205d5dbae5618421e7b524c0cc0

    • SHA512

      cc7540333eb1fe267842fdabd0d3a78ba918b54fba6a0bf09a0c9b6d62b82fcce5e7341dbe32c2a7cc88791a6a9d2f34dc8efaef394176977586b3f8cdff9eab

    Score
    3/10
    • Target

      $DESKTOP/PassMemPhone.jar

    • Size

      83KB

    • MD5

      9e27eb570f5b14179ea4f29e2af9b74d

    • SHA1

      257f42392a8d1021abc7ee9e9865fe32c25a5f03

    • SHA256

      8b9d763bc771be71b34435e2df2f0c6321647f3081778550a6b7e5efe8ce9863

    • SHA512

      5f9a4f3a420a4d2cb551918180b9726731f70777dac7d19e7b805296306431fa040f260177fe505dec370a2f23931de23fbb9678622dcb59c0dc3f267b6596c7

    • SSDEEP

      1536:EQSnDIJq1wKDx+MrmM+8/ZhNUktotpxmdP6lWaoOxXKXIn9vc/Ex/eUr:E7DIgCK/NZhNU66guXOIna8QUr

    Score
    3/10
    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      15KB

    • MD5

      89351a0a6a89519c86c5531e20dab9ea

    • SHA1

      9e801aaaae9e70d8f7fc52f6f12cedc55e4c8a00

    • SHA256

      f530069ef87a1c163c4fd63a3d5b053420ce3d7a98739c70211b4a99f90d6277

    • SHA512

      13168fa828b581383e5f64d3b54be357e98d2eb9362b45685e7426ffc2f0696ab432cc8a3f374ce8abd03c096f1662d954877afa886fc4aa74709e6044b75c08

    • SSDEEP

      384:/MnT0MKT/Xwr2izZQ86mpAT8F9lN8Ov0J:EQMKzwTFnVX8i0

    Score
    3/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      bf712f32249029466fa86756f5546950

    • SHA1

      75ac4dc4808ac148ddd78f6b89a51afbd4091c2e

    • SHA256

      7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af

    • SHA512

      13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4

    • SSDEEP

      192:0N2gQuUwXzioj4KALV2upWzVd7q1QDXEbBZ8KxHdGzyS/Kx:rJoiO8V2upW7vQjS/

    Score
    3/10
    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      24KB

    • MD5

      1fc1fbb2c7a14b7901fc9abbd6dbef10

    • SHA1

      4d9ed86f31075a3d3f674ff78f39c190a4098126

    • SHA256

      4f26394c93f1acb315c42c351983dafc7f094b2d05db6d7a1ba7dcb39a3a599e

    • SHA512

      76d8ff7fc301cc5ff966ad8be17f0f3f2d869ef797c5a2c55a062305c02133a842906448741bf9818ec369bbb2932b9a9c2193ebc59835b50e8703db0090fdb2

    • SSDEEP

      384:ya3Bj/GAqvdXP4P4IVlht8zNHxKNSJvor9e9dQTIHzOZwceyeZwd6TJdpq:yRtqLhtqKNS5sAvQTIB86T0

    Score
    3/10
    • Target

      PassMem.chm

    • Size

      117KB

    • MD5

      39bc516ea5c67b140ceb2cf3d0950732

    • SHA1

      f89ff77341529d552d9cc710538ffe9313c49b79

    • SHA256

      e4be2244bf709df21804413c909e5472f45c0059fa043c89157d8405fa4690b8

    • SHA512

      2b73d6f4571ad072029ec1ca23bf1f89566a2362f8d2d0c4db54afcf867a98a320209274a8ec0ac0ec6b657fd1a8709cc9b86a3f88d51820ce4a1fa987bad373

    • SSDEEP

      3072:TIxMbqrpz4193zLZ+VcmnGp4AkphvhNdhVy5tJBUn/cg:TIqbqrpzS3XYVcl4BhNfI5FUkg

    Score
    1/10
    • Target

      PassMem.exe

    • Size

      2.5MB

    • MD5

      5faba77e2dd9d939600a9dfcd48294f9

    • SHA1

      74c4b0838dfc3cfe121a343254eee455960d76d9

    • SHA256

      401c58335c1b631eca3bfd89ec5ce404274446806645a6010713f9181f145695

    • SHA512

      348c86b7d3197424f9a1d9710db6d4bf362cc643c635e5b88dc1d5cadccd1cbda7d371ed6ec9924c6de04dbc7e81f960ec71072d9420d91b938e77370322c972

    • SSDEEP

      49152:MVgYwDdW5ed8o7BG+Gwy+uSW1PVCGRT90M0IykS9iG9UHOZ:M6dW5To7Y+Gwy+uSQ590M0IykS9iGUu

    Score
    1/10
    • Target

      UpdateApp.exe

    • Size

      327KB

    • MD5

      dd3f55f51b18813dcadf40b2690bb9fd

    • SHA1

      81699d1641af3e2218350f9d26feefc8c2dcf991

    • SHA256

      3012adea80c90e5fabb0dc794d6bd0bd6a8be1076d2a7381c56af952bc750be5

    • SHA512

      a2de0aca5e53dd15a5e69283bce285d5d36f1e5d0af08965437ab90a0e2cc33e9bdf7d3fa79984f47b925cc963a35156bd232b915b987ee3c2785a8d960df40a

    • SSDEEP

      3072:DOtBlrzu2WI0OHzHtBlrzu2WI0OHzumg9ytBlrzu2WI0OHz:Dqnzu2WITnzu2WIc30nzu2WI

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks