Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

8aa30b67bf...18.exe

windows7-x64

7

8aa30b67bf...18.exe

windows10-2004-x64

7

$PLUGINSDI...am.dll

windows7-x64

3

$PLUGINSDI...am.dll

windows10-2004-x64

3

$PLUGINSDI...t2.dll

windows7-x64

3

$PLUGINSDI...t2.dll

windows10-2004-x64

3

$PLUGINSDI...g2.dll

windows7-x64

3

$PLUGINSDI...g2.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

1

$PLUGINSDI...ns.dll

windows10-2004-x64

1

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ta.dll

windows7-x64

3

$PLUGINSDI...ta.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...te.dll

windows7-x64

1

$PLUGINSDI...te.dll

windows10-2004-x64

1

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gr.dll

windows7-x64

3

$PLUGINSDI...gr.dll

windows10-2004-x64

3

$PLUGINSDI...xt.dll

windows7-x64

3

$PLUGINSDI...xt.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...dt.dll

windows7-x64

1

$PLUGINSDI...dt.dll

windows10-2004-x64

1

$PLUGINSDI...ry.dll

windows7-x64

3

$PLUGINSDI...ry.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8aa30b67bf76a1d921bc819ff7ab33a9_JaffaCakes118

  • Size

    9.5MB

  • Sample

    240601-q4xwfadh6t

  • MD5

    8aa30b67bf76a1d921bc819ff7ab33a9

  • SHA1

    8a5e4ce46fb3e8f80078206b4d7d060f2671d015

  • SHA256

    532df3e9c72085796854ebd190953c8c41c1f51fb448948d5a303a4b20e9dbac

  • SHA512

    b08f7b2752c9f8ae218c7f5d4de5d90fa0d5ac220f62ae67a8b21499aac1564cce54af5d87232fdb1222af47bb5e05f45122ad8f1782639429b3dc0b2b18519c

  • SSDEEP

    196608:oPmz6vb3FahtL6HaSt9hU56v5scsG00gD7K15NRk1jWiwNX3VnfyXH:oMi4bSRU5wsegD7K15NRk15wNXFnaXH

Score
7/10

Malware Config

Targets

    • Target

      8aa30b67bf76a1d921bc819ff7ab33a9_JaffaCakes118

    • Size

      9.5MB

    • MD5

      8aa30b67bf76a1d921bc819ff7ab33a9

    • SHA1

      8a5e4ce46fb3e8f80078206b4d7d060f2671d015

    • SHA256

      532df3e9c72085796854ebd190953c8c41c1f51fb448948d5a303a4b20e9dbac

    • SHA512

      b08f7b2752c9f8ae218c7f5d4de5d90fa0d5ac220f62ae67a8b21499aac1564cce54af5d87232fdb1222af47bb5e05f45122ad8f1782639429b3dc0b2b18519c

    • SSDEEP

      196608:oPmz6vb3FahtL6HaSt9hU56v5scsG00gD7K15NRk1jWiwNX3VnfyXH:oMi4bSRU5wsegD7K15NRk15wNXFnaXH

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/DLLWaitForKillProgram.dll

    • Size

      28KB

    • MD5

      9c4b8ec42d89f7557bfd90798ce52787

    • SHA1

      2376dde426ea65aa27c30e304086310605382475

    • SHA256

      ed52bdad7b383a179b9b0e21fefdda2d72695c5263a815d5e1e0bfac6c718548

    • SHA512

      17c12a27a08746755868558c037376dd7e20f03f0f71888c1329903b70975a54f57786c3c32bf88aaf30119f11ed978a6830ba91949e11cfc94fbb5ad95305b7

    • SSDEEP

      96:EP5ZuFye0MyQW4uPwhs+R/+gFrE1m/U/uG98bp2y+HS21kEZ1b+4Tu9C1uGg8wBu:akFyFRQ5wIzlH/UGq36EZY4T+Gul8U

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/DLLWebCount2.dll

    • Size

      28KB

    • MD5

      c49642ba9d55a615e141b3d08d929c1d

    • SHA1

      537229bbac385da55e2b405db64f4bf3c7d4aac5

    • SHA256

      03d23f6d0106e407ec499aaebd9db3884f8347ffb6fd60328623eacd1b29aacf

    • SHA512

      2b24fbc76343dcdf0823265d141c9828c31b05d7a62522f26fa63b98cd3e3df7f60296361f6502f32ee269167649ff290f861c69cd645b61067fb21a20f9f9f6

    • SSDEEP

      96:6K9Q0hcgBkt9te55782Yf2062GKofHkxbt1USvf97kzPaJsvvuLBudGaQJ86nU:PQ0mgfplYfAKom5+Sd0NvYYdbQJ8n

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/FILEDownPlug2.dll

    • Size

      28KB

    • MD5

      89c563060d908e5df6848ad15731e6d0

    • SHA1

      404d8d41700ecc907e5b7c849a0dcde8edda1e72

    • SHA256

      8bd1c61e9be2b8b07f6dac4782a96ee9e679c5f163133a51b57e1ecd72f3eff9

    • SHA512

      8eb86ed92ba4d3305a954d824a1ffc23d9aef02559c794c085f67583f32d8228834b09ad45edfd8a78b4634e62344f53e1106db64134b8dd2c5e0fae391da763

    • SSDEEP

      384:UCpErQTFze4TRt19H9emlJfbyLx/etuFVclW:YkTA4n19H9jbZMKlW

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/IEFunctions.dll

    • Size

      3KB

    • MD5

      9701818d39318145dd164794ef3a3846

    • SHA1

      7db701f8dc19163d46ba88e8b68d8dbf428a8152

    • SHA256

      3122b0413f74e88518cfd1b9c6e18435dd326ca177a2374b6405df78f43e776a

    • SHA512

      d92786630250e9eb6c47537b09684fa107f959b50d255c7f3952741eb438c3be47e171827d3a4407b049c33c12dad73f8ec381a7265b28a6d8ca101ff702e8a4

    Score
    1/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      eef9e469e8a30717974499f277d97e2a

    • SHA1

      2d33c25984ebd9116beeb55cdde4c5c86c023e5d

    • SHA256

      1f35bb6728237483c779005fc227e69fef51b0bafd32d15855d483948a337078

    • SHA512

      d860132106a1c03dfa23f983b3c503f1216ac02f3d47833b96dfb333fb30bc8ab4d4fecd1f1f0a89f0c7f3586405461e2d53c26f282bb48970e549659b364b48

    • SSDEEP

      192:8np6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+MTjK72dwF7dBEnbok:8p6UdHXcIiY535zBtMTj+BEnbo

    Score
    3/10
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/IsVista.dll

    • Size

      44KB

    • MD5

      344d13fd0fdd2d97e8d61960f40a8a30

    • SHA1

      3f0f120203005eea3e8ed1652a6ea8a607ea934d

    • SHA256

      17bb3331e2300aa01666fbee98b9552cec5e46212a4c5a340c0370b93df88f83

    • SHA512

      b4e49c58503532e270cc369f1cbd14d85edd46da5ab034dad730bd4297887dd541d445d2fbf205820e6afbbdba7ab6d5b78b694467554320fd6db8e06fe4f719

    • SSDEEP

      384:x4MHyTfkIbqaddF1qabhJfl7Tisz7c7t3TyAvdjWu875USXdvlHZYklIsg:FSTpbqaLfHJflCszOTbdjWR3Nvl

    Score
    3/10
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      32KB

    • MD5

      83142eac84475f4ca889c73f10d9c179

    • SHA1

      dbe43c0de8ef881466bd74861b2e5b17598b5ce8

    • SHA256

      ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729

    • SHA512

      1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1

    • SSDEEP

      384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+

    Score
    3/10
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/SelfDelete.dll

    • Size

      24KB

    • MD5

      7bf1bd7661385621c7908e36958f582e

    • SHA1

      43242d7731c097e95fb96753c8262609ff929410

    • SHA256

      c0ad2c13d48c9fe62f898da822a5f08be3bf6c4e2c1c7ffdf7634f2ca4a8859e

    • SHA512

      8317af5cc3ac802eb095f3fa8cc71daa1265ca58fead031c07872f3d4bb07663a7002ae734fad392a7617f0923fe0caf1f54ed55afdf8516a6a08e202d86fa7f

    • SSDEEP

      96:1dIrJYYrzPpqAAZ9sNIaI2y9WulXEGNRrG:nuYATpq/viyYuEYRr

    Score
    1/10
    behavioral17behavioral18

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c6f5b9596db45ce43f14b64e0fbcf552

    • SHA1

      665a2207a643726602dc3e845e39435868dddabc

    • SHA256

      4b6da3f2bdb6c452fb493b98f6b7aa1171787dbd3fa2df2b3b22ccaeac88ffa0

    • SHA512

      8faa0204f9ed2721acede285be843b5a2d7f9986841bcf3816ebc8900910afb590816c64aebd2dd845686daf825bbf9970cb4a08b20a785c7e54542eddc5b09a

    • SSDEEP

      192:qADKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQbVUSF:qAViJrtFRdbmXK8+WVUw

    Score
    3/10
    behavioral19behavioral20

    • Target

      $PLUGINSDIR/UserMgr.dll

    • Size

      55KB

    • MD5

      130f66c0161e6da46744abe3c0be4d9c

    • SHA1

      d2a44a0cd07bc0c5d81fc0d056d6d45d200896ed

    • SHA256

      955705c8c7188d06af16849e5cc3ceae79ea5d0808cc2851630a54d54bbc01f2

    • SHA512

      915b9135da230ec8d3016ba83bd7102b3f8cb13050189a176f8d4d50363f13584fb971226458bc493cd2df27723c8ab7273effab7d6c6e14d49e735d24d7fac8

    • SSDEEP

      768:fThBSJtwQegACHpCygw5eKeK/B/viiTRvTkujLWf2UEHzDSZA7yM5jt/BJE4lV:7SCQeLCHpCyNV9ZTRbkuOQzyMVt/blV

    Score
    3/10
    behavioral21behavioral22

    • Target

      $PLUGINSDIR/gettext.dll

    • Size

      28KB

    • MD5

      e25231179633076571aeeead84744f58

    • SHA1

      7c54ec2756c1844344b5c71c3dff0a65ee91d333

    • SHA256

      db39b31984d96ee25968859fe1621c1dbe07c17c46e3d04f865801f71d5b4347

    • SHA512

      4af0429ce8041d021aa38bc7af483548cacf3df8e0c12548a08ce51bd394bdf05dbddc2cf50eb71c754d15ec6e5161b9b7cdb581e6bb36de4fa1de1db63bcdda

    • SSDEEP

      192:hb00mgIwplYfAKout+SdAQkvYYdbQJ8n:V0bzwplYIRusIAQk5by

    Score
    3/10
    behavioral23behavioral24

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      f2c993a0c726386d72e4640967cef83e

    • SHA1

      efe88db252b5e9edff2d859e783fcf1a349e553f

    • SHA256

      6739a2c8075cc383620a867e983957de0b4ae9ef0453baadd1469132893d7301

    • SHA512

      3873a87ba360702c72a6d3e853a0b6f2df219593cf5436d12a9d4d169029e939993c45330212008b628184da64ae98d6a7ab42b30d5f82c896acfc89d558169f

    • SSDEEP

      96:qBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8XQB0NKndY7ndS27gA:q6n+0SAfRE+/8k0NKdqn420

    Score
    3/10
    behavioral25behavioral26

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      cdff6b8f9523b6ef9f20fb5f9e90f1a5

    • SHA1

      b25f6e0a19b41ff0a12de8e98e3005bc119d34fa

    • SHA256

      80b2740fb3a21ffab022a96ce6b420019072f8ef3a048fd9dea4a5b64498c0c8

    • SHA512

      62585c6a6103aed10f9a79c016df8cb630c3e37715542b5f26aa1a910771540c9b323ddbba3329db0ecf524143f7a27b782e198ce944317f764be6b9d04b792e

    • SSDEEP

      96:W7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3trCUTMxVXw32E:IKgfwgcr8zylsB49lrCUTMxVX7

    Score
    3/10
    behavioral27behavioral28

    • Target

      $PLUGINSDIR/nsisdt.dll

    • Size

      5KB

    • MD5

      df4795dfabe3bc9278a73d496cc4b40d

    • SHA1

      2648ded47e29ecf3e1a1cc20c631e83caf566897

    • SHA256

      2261027077f23c8dba6b72af28862832aaa059740d0f5634b46cabb14326dd10

    • SHA512

      013d9712c3d699a7f41ab3e55931c9abb421fb2eda3542da5a4831ad2f073a1b0643120cc78147db0bfcd01df98ade3045ecb2f1e252fff1dc40be845e5ae303

    • SSDEEP

      24:etGSyYi61xyMmuEwv61OVXOwr+t5blXgO8ELnD3TPrHjf7Xz5CY1aeBEW58q6TvK:6y2xyNuEwWwU5blmPeB958xTvT7L/

    Score
    1/10
    behavioral29behavioral30

    • Target

      $PLUGINSDIR/registry.dll

    • Size

      24KB

    • MD5

      d98f6c408ac5e722e0cdf74a41071b4c

    • SHA1

      7fb6f6dd0a42c27f33488d4318863fefc303979e

    • SHA256

      f3b1f7ef86b62aaa4bca6ef8377384e10377f8d17861443bbdb9d7e3a939ac4b

    • SHA512

      7c390297321ce8cf4c26aca8b14bc0149926101b12b13299dd3d46801a8a7992ee716483f7f4d436fc12ef531fa6fc1c38d0d8995858db35f30a1a05af119233

    • SSDEEP

      384:5y2P/APQQtB3/x9s7ayAUS1d0zW3V6S38bZf81U00C1V3VF4y9yTZxEXYv5g7RYY:XYbfvx9s7LjbeUi+3EXxRhV6z

    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks