Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

b748e68c3b...18.exe

windows7-x64

7

b748e68c3b...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

DMCustomControls.dll

windows7-x64

1

DMCustomControls.dll

windows10-2004-x64

1

DMSharedClasses.dll

windows7-x64

1

DMSharedClasses.dll

windows10-2004-x64

1

DMStartupW...rs.dll

windows7-x64

1

DMStartupW...rs.dll

windows10-2004-x64

1

DMStartupWizard.dll

windows7-x64

1

DMStartupWizard.dll

windows10-2004-x64

1

DMUpdater.exe

windows7-x64

1

DMUpdater.exe

windows10-2004-x64

1

DataMaster...er.exe

windows7-x64

1

DataMaster...er.exe

windows10-2004-x64

1

DataMaster...rs.dll

windows7-x64

1

DataMaster...rs.dll

windows10-2004-x64

1

DataMaster...LS.exe

windows7-x64

1

DataMaster...LS.exe

windows10-2004-x64

1

DataMaster...er.exe

windows7-x64

1

DataMaster...er.exe

windows10-2004-x64

1

DataMasterDDE.exe

windows7-x64

1

DataMasterDDE.exe

windows10-2004-x64

1

DataMaster...rs.dll

windows7-x64

1

DataMaster...rs.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    17/06/2024, 06:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b748e68c3b132a964735e64fdcdab877_JaffaCakes118.exe

  • Size

    3.0MB

  • MD5

    b748e68c3b132a964735e64fdcdab877

  • SHA1

    9e6e18b4368d91cbf60af4b7ab7ecb7b3d0354a5

  • SHA256

    76238af88d9a95bd3c17b150465d6dc8f0734d9b25670d8bd10d63559a55b615

  • SHA512

    9ddd0fd7ad0395af9147f4bec255aedb32fbfbeb9be5a9cf2952c30f9a39db46a96ea194d4166742fd942a076a1b014418b6a66c0d8ee2f1171128827fa6194b

  • SSDEEP

    49152:sTKVqrkZt9zHRK8wHGkNmL8MzYjNJSszKUqGDbc1oODEydI+YdYl8gt:sTKVqY/9zxXwHGQmL8LSUK/p7EydI3aT

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b748e68c3b132a964735e64fdcdab877_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\b748e68c3b132a964735e64fdcdab877_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2052

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsj7255.tmp\Processes.dll
    Filesize

    56KB

    MD5

    cc0bd4f5a79107633084471dbd4af796

    SHA1

    09dfcf182b1493161dec8044a5234c35ee24c43a

    SHA256

    3b5388e13dab53d53e08791f492ed7d3094a0cee51e9841af83ce02534e0621c

    SHA512

    67ba90ec04366e07d0922ffb4dbbb4f12f90b6785b87700adaae29327db9ec2a03d750b229f858db0594f439499d6346fbf1ebc17c77162bf8da027515219ee3

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsj7255.tmp\ioSpecial.ini
    Filesize

    745B

    MD5

    5162b9b305ff1db79cbd6026f851a6f2

    SHA1

    ea7abaecda1d8a7b9e156650b07e12ee26657188

    SHA256

    d76a1a933119c9807496f4f7c4e6f565ac20869c59c0bc22e497fb6586da40e9

    SHA512

    cd2f6063d1b99b78a2b14d15fbf50f738886cc4eabdad622efd86101bcd8f24410ce88bee43b7792fd1a62f038dce7618fcc0f977cdcca0cf27b18b36b26fc7a

    Download Submit

  • \Users\Admin\AppData\Local\Temp\nsj7255.tmp\InstallOptions.dll
    Filesize

    14KB

    MD5

    325b008aec81e5aaa57096f05d4212b5

    SHA1

    27a2d89747a20305b6518438eff5b9f57f7df5c3

    SHA256

    c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b

    SHA512

    18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf

    Download Submit