Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

02b8abad47...18.exe

windows7-x64

7

02b8abad47...18.exe

windows10-2004-x64

7

$0/uninstall.exe

windows7-x64

7

$0/uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$0/zwankysearch.dll

windows7-x64

1

$0/zwankysearch.dll

windows10-2004-x64

1

$0/zwankysearch.exe

windows7-x64

1

$0/zwankysearch.exe

windows10-2004-x64

1

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02b8abad471036589e86b8b94d98a345_JaffaCakes118

  • Size

    697KB

  • Sample

    240620-etscessfmq

  • MD5

    02b8abad471036589e86b8b94d98a345

  • SHA1

    15a1ebef90c2e8eda57b547284c858dec5c0697c

  • SHA256

    e223f60ac7d4de97d15b02c451531144e95b2a2caabf73ef11a05863116eac54

  • SHA512

    d8b7ff34204cb4d6d938e0c9e3bfbdc1631e7e427eae36a985873399ac90d7dc7b7c0682e0180311c9285884898b2d56363a29535733d6a7fbf9d74097e8e7c9

  • SSDEEP

    12288:5UIhAgU6vtay2X8kJVjs6WgMB+oNrBNH0xv5sGs5STesq4GDi6je58:5UIhDZvb2X/JVjwB+oNtkmY24u

Score
7/10

Malware Config

Targets

    • Target

      02b8abad471036589e86b8b94d98a345_JaffaCakes118

    • Size

      697KB

    • MD5

      02b8abad471036589e86b8b94d98a345

    • SHA1

      15a1ebef90c2e8eda57b547284c858dec5c0697c

    • SHA256

      e223f60ac7d4de97d15b02c451531144e95b2a2caabf73ef11a05863116eac54

    • SHA512

      d8b7ff34204cb4d6d938e0c9e3bfbdc1631e7e427eae36a985873399ac90d7dc7b7c0682e0180311c9285884898b2d56363a29535733d6a7fbf9d74097e8e7c9

    • SSDEEP

      12288:5UIhAgU6vtay2X8kJVjs6WgMB+oNrBNH0xv5sGs5STesq4GDi6je58:5UIhDZvb2X/JVjwB+oNtkmY24u

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $0/uninstall.exe

    • Size

      83KB

    • MD5

      26d12a09fd0b7b3e32e93355a3a110af

    • SHA1

      1e1e8772d579ae03fd6f35a7b95fe6fd384cf5a1

    • SHA256

      82a1fe8e22e3e3ccb149d5bdcc8cbfec18d89dd9277b909e725faed309165487

    • SHA512

      524df1ec0ad2980236601fa1abfd30451f4d3eac681ad50d12ad9b981f5c75ff7b0dab0541ad269edb5e4e653088635acb1522f1c2d8bd0816db0be11901aa56

    • SSDEEP

      1536:WEkjY1zy214Qay0DGkJ7qAELVigJ83ZKRcpw/1q792sX7Ia12/DCJ:9kjAJ4dDGkJ+AI0vcuo1qRka0/s

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral3behavioral4

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      13KB

    • MD5

      d765c492c21689e3d9d61634371fd861

    • SHA1

      ac200933671ae52c9d5544d0e2e8e9144d286c83

    • SHA256

      551e6042dd494ea01549555ffc194ab9729da09058ec714eb368dd06642c9bbc

    • SHA512

      9919a9e848c8f1e26c75d0d29207571e4b86a4140bd554743d2c1f8bd7f386fe4919345b163d89a5d907fb165e435ba0ac5f6b1101713636141f156a420e2e0f

    • SSDEEP

      192:9B6RvrfvOuJQDghBy/X7QKq3TLGciZJf0EzWzMnz6WoF1dBs:v6RrviWaX7eiZJ7nz6bB

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      fe24766ba314f620d57d0cf7339103c0

    • SHA1

      8641545f03f03ff07485d6ec4d7b41cbb898c269

    • SHA256

      802ef71440f662f456bed6283a5ff78066af016897fe6bfd29cac6edc2967bbd

    • SHA512

      60d36959895cebf29c4e7713e6d414980139c7aa4ed1c8c96fefb672c1263af0ce909fb409534355895649c0e8056635112efb0da2ba05694446aec2ca77e2e3

    • SSDEEP

      192:rO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1aMBgMO:yKAFERdlxhGRYUzqZaMB

    Score
    3/10
    behavioral7behavioral8

    • Target

      $0/zwankysearch.dll

    • Size

      564KB

    • MD5

      50c053dde12ebd2beaef57da46b978b3

    • SHA1

      2b50d1e332b100fb34c69ca2fc71af73a5dca37a

    • SHA256

      d472a71268d322f9bbb476d9436f8e3f1de7544a1931e79ab2e74ca466d69fc8

    • SHA512

      6acf284544a0eafc5a7d28362ff243784668550a1a4a3160720dd8d932a7893a6802fc72c07066383e20357c9884a6274f3bbce13b8087b514837ec44ffaaf2c

    • SSDEEP

      12288:yXOxCW8+P2a2MMcd/x8e6nEVsMGtSuPnWOjiJZQ0PC:9xo+Pj2i/x8n6sMGwy9jiJHPC

    Score
    1/10
    behavioral10behavioral9

    • Target

      $0/zwankysearch.exe

    • Size

      56KB

    • MD5

      e1267e94a1e307edbccb999b3af92c1e

    • SHA1

      a02a81ce27bea01e9d5eb29133311a66fff661f9

    • SHA256

      131bf3daf00e100d63f8c6615c808835de60d3f7f0ffd506d67a201a2883c770

    • SHA512

      4cdfb59b565ce27a919f86964ce7295f4ba00d9dfd28df2079fc2f1af4343bb23bddce1c30729a59181a3f87910becf0543a89baa95beb92127cf73be79a4bf4

    • SSDEEP

      1536:d3D7Hk3JOih0EExmF0lYB+xSblUBDLiD9QJ:d/8JO60AjIiD92

    Score
    1/10
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      13KB

    • MD5

      d765c492c21689e3d9d61634371fd861

    • SHA1

      ac200933671ae52c9d5544d0e2e8e9144d286c83

    • SHA256

      551e6042dd494ea01549555ffc194ab9729da09058ec714eb368dd06642c9bbc

    • SHA512

      9919a9e848c8f1e26c75d0d29207571e4b86a4140bd554743d2c1f8bd7f386fe4919345b163d89a5d907fb165e435ba0ac5f6b1101713636141f156a420e2e0f

    • SSDEEP

      192:9B6RvrfvOuJQDghBy/X7QKq3TLGciZJf0EzWzMnz6WoF1dBs:v6RrviWaX7eiZJ7nz6bB

    Score
    3/10
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      fe24766ba314f620d57d0cf7339103c0

    • SHA1

      8641545f03f03ff07485d6ec4d7b41cbb898c269

    • SHA256

      802ef71440f662f456bed6283a5ff78066af016897fe6bfd29cac6edc2967bbd

    • SHA512

      60d36959895cebf29c4e7713e6d414980139c7aa4ed1c8c96fefb672c1263af0ce909fb409534355895649c0e8056635112efb0da2ba05694446aec2ca77e2e3

    • SSDEEP

      192:rO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1aMBgMO:yKAFERdlxhGRYUzqZaMB

    Score
    3/10
    behavioral15behavioral16

MITRE ATT&CK Enterprise v15

Tasks