Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
7879f0eeb24...18.exe
windows7-x64
7879f0eeb24...18.exe
windows10-2004-x64
7$PLUGINSDI...el.dll
windows7-x64
7$PLUGINSDI...el.dll
windows10-2004-x64
7$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$TEMP/SDM1...er.dll
windows7-x64
7$TEMP/SDM1...er.dll
windows10-2004-x64
7$TEMP/SDM1...es.exe
windows7-x64
7$TEMP/SDM1...es.exe
windows10-2004-x64
7$TEMP/SDM1...er.dll
windows7-x64
1$TEMP/SDM1...er.dll
windows10-2004-x64
3$TEMP/SDM1...er.exe
windows7-x64
1$TEMP/SDM1...er.exe
windows10-2004-x64
1$TEMP/SDM1...ll.dll
windows7-x64
7$TEMP/SDM1...ll.dll
windows10-2004-x64
7General
-
Target
879f0eeb24b183f4f35a09bb474f7fec_JaffaCakes118
-
Size
1.2MB
-
Sample
240531-twaygsdh4z
-
MD5
879f0eeb24b183f4f35a09bb474f7fec
-
SHA1
3f1c6a5fa8f3242f82ee46dbe81a1071bd045a28
-
SHA256
4b04bc91719f8d04209ef9f520fc2cb27e863574fd1f1f9ca95c8c1fef51a9e7
-
SHA512
43942d690188d9785e5560599e03557e714c7021d556a6786dc0560ed60c9fa36a8181c6b2eea45738aef0715a3f8cd73f3c01b3b22ec9dfccd0b544edb6e416
-
SSDEEP
24576:yPX2vzp85e6oUS0FLTIiQ64berdI4iuKbQaqfQN+QfsqV:6Gvz0aUS0lIiQqdI4qfqqB0qV
Behavioral task
behavioral1
Sample
879f0eeb24b183f4f35a09bb474f7fec_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
879f0eeb24b183f4f35a09bb474f7fec_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/SelfDel.dll
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/SelfDel.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
$TEMP/SDM143/ExentCtlInstaller.dll
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
$TEMP/SDM143/ExentCtlInstaller.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
$TEMP/SDM143/Free Ride Games.exe
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
$TEMP/SDM143/Free Ride Games.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
$TEMP/SDM143/Splasher.dll
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
$TEMP/SDM143/Splasher.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
$TEMP/SDM143/cmhelper.exe
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
$TEMP/SDM143/cmhelper.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
$TEMP/SDM143/resourceDll.dll
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
$TEMP/SDM143/resourceDll.dll
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
879f0eeb24b183f4f35a09bb474f7fec_JaffaCakes118
-
Size
1.2MB
-
MD5
879f0eeb24b183f4f35a09bb474f7fec
-
SHA1
3f1c6a5fa8f3242f82ee46dbe81a1071bd045a28
-
SHA256
4b04bc91719f8d04209ef9f520fc2cb27e863574fd1f1f9ca95c8c1fef51a9e7
-
SHA512
43942d690188d9785e5560599e03557e714c7021d556a6786dc0560ed60c9fa36a8181c6b2eea45738aef0715a3f8cd73f3c01b3b22ec9dfccd0b544edb6e416
-
SSDEEP
24576:yPX2vzp85e6oUS0FLTIiQ64berdI4iuKbQaqfQN+QfsqV:6Gvz0aUS0lIiQqdI4qfqqB0qV
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
-
-
Target
$PLUGINSDIR/SelfDel.dll
-
Size
5KB
-
MD5
e5786e8703d651bc8bd4bfecf46d3844
-
SHA1
fee5aa4b325deecbf69ccb6eadd89bd5ae59723f
-
SHA256
d115bce0a787b4f895e700efe943695c8f1087782807d91d831f6015b0f98774
-
SHA512
d14ad43a01db19428cd8ccd2fe101750860933409b5be2eb85a3e400efcd37b1b6425ce84e87a7fe46ecabc7b91c4b450259e624c178b86e194ba7da97957ba3
-
SSDEEP
96:NdekHUj5z13cPopei+Ml9PNDFbS7xg+TScrQ5:NdeuU9xcPopr+M9FbSS+TSE
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
a436db0c473a087eb61ff5c53c34ba27
-
SHA1
65ea67e424e75f5065132b539c8b2eda88aa0506
-
SHA256
75ed40311875312617d6711baed0be29fcaee71031ca27a8d308a72b15a51e49
-
SHA512
908f46a855480af6eacb2fb64de0e60b1e04bbb10b23992e2cf38a4cbebdcd7d3928c4c022d7ad9f7479265a8f426b93eef580afec95570e654c360d62f5e08d
-
SSDEEP
192:aVL7iZJX76BisO7+UZEw+Rl59pV8ghsVJ39dx8T:d7NsOpZsfLMJ39e
Score3/10 -
-
-
Target
$PLUGINSDIR/nsExec.dll
-
Size
6KB
-
MD5
14f5984b926208de2aafb55dd9971d4a
-
SHA1
e5afe0b80568135d3e259c73f93947d758a7b980
-
SHA256
030bcfa82e3bb424835a5fa53a3ff17ab08557d3bbeea4815313036fc4bdafe1
-
SHA512
e9ec97dd57ead871789d49ed38d9fde5f31d3cb2547810cae49a736e06b9f9b28cf8efea825eb83c3e07d880ee798abfb9069c6957416d5973c83e4531814e27
-
SSDEEP
96:k7GUaYNwCLuGFctpiKFlYJ8hH4RVHpwdEeY3kRlDr6dMqqyVgNJ38:Wygp3FcHi0xhYMR8dMqJVgN
Score3/10 -
-
-
Target
$TEMP/SDM143/ExentCtlInstaller.dll
-
Size
100KB
-
MD5
6b2c9276b76ff82abc5b12626a6b3201
-
SHA1
ff1c09a79230e66eb6df7f6d7848710f1acfffa1
-
SHA256
76814c96196776c5ed4d65b9144d66423c78fda2faa61daf87cf4c742c07551b
-
SHA512
20bc0e0f236bf7f4cb91dfa205b41175abe2a830d4adb9f210d2da2291ddc444c8484485c5c97a0141cfb3763b1e46542f5b211057966d85dc4d4c764e8eefe0
-
SSDEEP
1536:GyrB9NViYoJ3w1NjSzF5yfBsiZpsVI2TFQblrjgZYBmmlNL9bnouy8/Dvs3h5h:19eS3sF5EsuyQgp2out/DvSh
Score7/10 -
-
-
Target
$TEMP/SDM143/Free Ride Games.exe
-
Size
504KB
-
MD5
f7a4ce326cd8b7a2e3e8b1ad80aba89a
-
SHA1
fc00c30174b1c61c4400cd94285f944728b8c1fd
-
SHA256
78793e27ce8c0794a036423e65d351851ed662b941f33a763f3db4ef0a6b546f
-
SHA512
74c7fdf75f66e39708de9e89e8aebb0a38b31c3c4b170dc6cc943b3aeee900ed080ae3d77af18dd54dcadfa4ecca810d01b3b3cdb35216cb8e9b028e668fb2b1
-
SSDEEP
12288:E3Hkon5WS0bjbLLZBhW3SoraotlA4zWfc8lMoSkP:E3HkoES0/LfIioC4v8L
Score7/10 -
-
-
Target
$TEMP/SDM143/Splasher.dll
-
Size
475KB
-
MD5
41d94c8eb8cb17e04f8ec6e14132f9ca
-
SHA1
add92b031eb36b26335763780df88bca58636ed7
-
SHA256
2e522a4da2c291ebcde484b4a04a6ef0691a732b9db454f12399d3e577327c96
-
SHA512
0561594d671cc64717463d59e2f076453614584ccdd47b4a39cd347e9999ba63463233c75dd9972102a2634b1abfe6c97fa8f682d944bc5cf129724b7595faa7
-
SSDEEP
12288:2I2EL1NaycNyL+kNmQLnmQtMleiQ8Zceqw1:tTayPLDltMUiQ8Zceqw1
Score3/10 -
-
-
Target
$TEMP/SDM143/cmhelper.exe
-
Size
234KB
-
MD5
3a9774028e1e3968b8c202fd199d0084
-
SHA1
6e19763c3f42c8d6596135a7566bef07a0cbeadd
-
SHA256
93a63465ea363661a141043c404f5b94ab9ac6cfeee3fd158bdf4e1fc50e3af5
-
SHA512
ea7e67887d7b8fd3e6049ee1ba7a786bb895158279e464c5c7a35e323aefac34e81e5515e493acf447953a08f13b94024c4a460ebc77f03ef0d305feb8b81d06
-
SSDEEP
6144:VcF3h+/MWLriz/BaQKoiQH22uhJFJoaMOKFNgv5x48yH2geFELNtgxQh:VcF3h+By/BaQKoiQHa7oG/Fh0
Score1/10 -
-
-
Target
$TEMP/SDM143/resourceDll.dll
-
Size
171KB
-
MD5
5cf0fba9e8775382233c8e63e52c838a
-
SHA1
b2a092f71eff0f6916652d7f3bfde9204eda5636
-
SHA256
7d940af8950b106227539cd4bdfb62f2d37a4abeaf568ebe2275fd31058c2ca5
-
SHA512
73489e3638b98ffd7bd516bfed519cfd48758aaaedc11cb202d11822cad609caf9af95e9e864bd8a992be826945e6d018ce081f3970511fd49d7757ca6affd25
-
SSDEEP
3072:+ZY/h+iA4GaJfGZK2MiMq5dpNQA2Wj5vg/ySQGdXMd86a30GCooutkzjO:YWwqGaJfGZ1Mq5BRj2/yR8XMZ0CooSkz
Score7/10 -