Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

0bd30f42b1...18.exe

windows7-x64

7

0bd30f42b1...18.exe

windows10-2004-x64

7

$PLUGINSDI...ge.dll

windows7-x64

1

$PLUGINSDI...ge.dll

windows10-2004-x64

1

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...dt.dll

windows7-x64

1

$PLUGINSDI...dt.dll

windows10-2004-x64

1

7za.exe

windows7-x64

1

7za.exe

windows10-2004-x64

1

ChineseChess.exe

windows7-x64

3

ChineseChess.exe

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...dt.dll

windows7-x64

1

$PLUGINSDI...dt.dll

windows10-2004-x64

1

aminstall.dll

windows7-x64

1

aminstall.dll

windows10-2004-x64

3

Components...s.html

windows7-x64

1

Components...s.html

windows10-2004-x64

1

eula.rtf

windows7-x64

4

eula.rtf

windows10-2004-x64

1

readme.rtf

windows7-x64

4

readme.rtf

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0bd30f42b1f803e0e87a8f5eda092604_JaffaCakes118

  • Size

    2.7MB

  • Sample

    240625-bzzrxatclf

  • MD5

    0bd30f42b1f803e0e87a8f5eda092604

  • SHA1

    0ce789f1dc9d0f8ad1332c32498e992dcf0b5c15

  • SHA256

    1fd0eb5a0bde40999118afa7beb7e99d43ba60eeba41d3100c8af08c00dc3aa4

  • SHA512

    ccfd3a91813ca0466c3443d7f17962c8364dfdb060a62a18109de46adc89b194d333ca4fde54eb60142a081729b5d46c6a0cc015fc2d7836f3fe1ae43299a756

  • SSDEEP

    49152:mHoT7vpV9HdK0SqON0HwcJaFgEsP5qDl3CntNIxqQr/PXGjJeWIJlzd++6:owFVu0Sv0Hwr3sBqDpCvmqQr2jJeJJlG

Score
7/10

Malware Config

Targets

    • Target

      0bd30f42b1f803e0e87a8f5eda092604_JaffaCakes118

    • Size

      2.7MB

    • MD5

      0bd30f42b1f803e0e87a8f5eda092604

    • SHA1

      0ce789f1dc9d0f8ad1332c32498e992dcf0b5c15

    • SHA256

      1fd0eb5a0bde40999118afa7beb7e99d43ba60eeba41d3100c8af08c00dc3aa4

    • SHA512

      ccfd3a91813ca0466c3443d7f17962c8364dfdb060a62a18109de46adc89b194d333ca4fde54eb60142a081729b5d46c6a0cc015fc2d7836f3fe1ae43299a756

    • SSDEEP

      49152:mHoT7vpV9HdK0SqON0HwcJaFgEsP5qDl3CntNIxqQr/PXGjJeWIJlzd++6:owFVu0Sv0Hwr3sBqDpCvmqQr2jJeJJlG

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/BgImage.dll

    • Size

      7KB

    • MD5

      a3f29d638d38fa62fbc099353631c25e

    • SHA1

      30fd4b815b925e1cf94015bc1e0a8f1101660e0b

    • SHA256

      0ccabc3733a75c5b7e0d2b6dd9fd2ba5712dbce823424187d89b719d830ae570

    • SHA512

      ca4dda8368b01b356a9f1ddf190b31a07547bb4e04ec08d13beaaf919b6b97ecfb343d559a7b714bcbd64848eaefb81f01c6dbdd5e1058e25305727bff969170

    • SSDEEP

      96:4uJQGDD6lKsLcLGRpHZwlkxYWaSsZL5JRjn1zDUsc:4umGDD6BgLGR4ZLjl1Usc

    Score
    1/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      12KB

    • MD5

      3c19f79ce11facc2fc4d3351dbb263e0

    • SHA1

      17f4bf4b18ea7700f70ac7d825dc997be0d25f71

    • SHA256

      cfaba712ad640ce2b4890005ffcf03ed9e2a18a6cf9075295f3aaea1478896b9

    • SHA512

      05c9ac861e4fed610171fcb5fad40abc30cbf90e9c7cb13c758f52cdff568af0fdd6af968db4fb143a748c77f21c353c7cffea28cbcbd2ad17157038ab490273

    • SSDEEP

      192:Aq6dnSzJb/WHM9Vm8/FlW8pMFEi49xpkpIURnPehwbbHF1Quhcb:L6dnYbuH+3FlcmzWnW2bbMuO

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      725145e8caa39635cab9899c47c72eda

    • SHA1

      30478c907551bd920bf359638b091fc5c10b5a53

    • SHA256

      1759e4f7777fb8c9ed356a7d4dc237a90e0760061685d44ea02d40ca9e359ceb

    • SHA512

      de31286ea10321f762a3b6e7c6c82177d5b6f45a82adc936fcbbc23105708cbbbec903ba94ba94e7723e80f1828393e5395ef575b37136b19de7535e74e24547

    • SSDEEP

      192:lOSsJI/rqmIDNLU0dq51EgAiNbubv6pLZ:jHQQ0d01Egbq76p

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      05d80bc376fef439fb7d2dbb004aa662

    • SHA1

      e83904b91cee7a9b93ed84591bdcf2bb700edd88

    • SHA256

      c49f3d805e87f6df15dc0410770dcec4df09f73b20f6d88b44f55223da64c96c

    • SHA512

      87b9e1ee7382654d3568dd0a0e59d3f2175372358b4f815e4f42657b79fd3f852203cdf26a73606f1b5d4ec9daa3d4d61952eaf494cf9bb00036741ac6b3fac8

    • SSDEEP

      96:hVIu5NEOmRR1ucf+8eZetJfHhe3QY2Y2yYjs01HyJ:hCwmn1u8+8eZAfHuQyYjs6S

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/nsisdt.dll

    • Size

      5KB

    • MD5

      df4795dfabe3bc9278a73d496cc4b40d

    • SHA1

      2648ded47e29ecf3e1a1cc20c631e83caf566897

    • SHA256

      2261027077f23c8dba6b72af28862832aaa059740d0f5634b46cabb14326dd10

    • SHA512

      013d9712c3d699a7f41ab3e55931c9abb421fb2eda3542da5a4831ad2f073a1b0643120cc78147db0bfcd01df98ade3045ecb2f1e252fff1dc40be845e5ae303

    • SSDEEP

      24:etGSyYi61xyMmuEwv61OVXOwr+t5blXgO8ELnD3TPrHjf7Xz5CY1aeBEW58q6TvK:6y2xyNuEwWwU5blmPeB958xTvT7L/

    Score
    1/10
    behavioral11behavioral12

    • Target

      7za.exe

    • Size

      460KB

    • MD5

      632f81520aeef635c2e86a7ebd032131

    • SHA1

      fdc663954b7926f90f0626801c3eb821f91d9e42

    • SHA256

      dfa9dc10c2e18009cba21d219ff6792b908b5a3c0946bac162265b461c02d6be

    • SHA512

      b30abe7f17561da6083f00791b5d1f0607fbc030c5dc496c1cdd1271bf1036c74f778cc7d29fd93d70ca5e149988b8e87b63e9f6fdc68440179495dce4c36007

    • SSDEEP

      6144:i5z1Yp9CdfvG0gTwg+HYEO02xesfrpCO/VHo1Q1k4dFuZE7HvcjlZdi3718:i3eFqHG0fAPdFuZE6lj

    Score
    1/10
    behavioral13behavioral14

    • Target

      ChineseChess.exe

    • Size

      3.8MB

    • MD5

      7c47e38e9c3c115f9b3635ac18da4e7d

    • SHA1

      b7b69d402fc7230abd11483d715aee9b0a9c0223

    • SHA256

      a13cd85ae6cb3960bd16de3adf32d30772313b62be0c214a9a5d59fe08619046

    • SHA512

      5e5d2cdec5218162572c95224a9823006fa4ea854d0ba61b13a015e89b27fecda95d698349608a05d1d83553e41ae2a9266c53a979f800c798303c9f9f3483cb

    • SSDEEP

      98304:D9m5/EIcYqxQM2ZUTsrlOcBnLdoxhVVrCeZEQryEucY:hmdjcNQ5EVGZfEucY

    Score
    3/10
    behavioral15behavioral16

    • Target

      Uninstall.exe

    • Size

      88KB

    • MD5

      e10da989e7299ad0a37591649a676881

    • SHA1

      66494a8c3093e9a4a6026c2ad29615c8f8be1a1c

    • SHA256

      fa5493c2c562c3431083155b9184d6e5ca54307f550fa03863eebb409ed339ae

    • SHA512

      7fa1e6b829024439377813f54ce0bda1be3858df525d83293f6065fe783fca2fcac8c74d3d6e08665ebc258aeb5764f24f18f1b2dc75fe061e459d15695c7d39

    • SSDEEP

      1536:Rt/XUS3ZQ9h5f90D5kJWHR83dIWXwyNLIAW35pSkeVS9XaxIdPar:R1mh5CD5kJAR8zXnLIA8p3eVS9Xu

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral17behavioral18

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      12KB

    • MD5

      3c19f79ce11facc2fc4d3351dbb263e0

    • SHA1

      17f4bf4b18ea7700f70ac7d825dc997be0d25f71

    • SHA256

      cfaba712ad640ce2b4890005ffcf03ed9e2a18a6cf9075295f3aaea1478896b9

    • SHA512

      05c9ac861e4fed610171fcb5fad40abc30cbf90e9c7cb13c758f52cdff568af0fdd6af968db4fb143a748c77f21c353c7cffea28cbcbd2ad17157038ab490273

    • SSDEEP

      192:Aq6dnSzJb/WHM9Vm8/FlW8pMFEi49xpkpIURnPehwbbHF1Quhcb:L6dnYbuH+3FlcmzWnW2bbMuO

    Score
    3/10
    behavioral19behavioral20

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      725145e8caa39635cab9899c47c72eda

    • SHA1

      30478c907551bd920bf359638b091fc5c10b5a53

    • SHA256

      1759e4f7777fb8c9ed356a7d4dc237a90e0760061685d44ea02d40ca9e359ceb

    • SHA512

      de31286ea10321f762a3b6e7c6c82177d5b6f45a82adc936fcbbc23105708cbbbec903ba94ba94e7723e80f1828393e5395ef575b37136b19de7535e74e24547

    • SSDEEP

      192:lOSsJI/rqmIDNLU0dq51EgAiNbubv6pLZ:jHQQ0d01Egbq76p

    Score
    3/10
    behavioral21behavioral22

    • Target

      $PLUGINSDIR/nsisdt.dll

    • Size

      5KB

    • MD5

      df4795dfabe3bc9278a73d496cc4b40d

    • SHA1

      2648ded47e29ecf3e1a1cc20c631e83caf566897

    • SHA256

      2261027077f23c8dba6b72af28862832aaa059740d0f5634b46cabb14326dd10

    • SHA512

      013d9712c3d699a7f41ab3e55931c9abb421fb2eda3542da5a4831ad2f073a1b0643120cc78147db0bfcd01df98ade3045ecb2f1e252fff1dc40be845e5ae303

    • SSDEEP

      24:etGSyYi61xyMmuEwv61OVXOwr+t5blXgO8ELnD3TPrHjf7Xz5CY1aeBEW58q6TvK:6y2xyNuEwWwU5blmPeB958xTvT7L/

    Score
    1/10
    behavioral23behavioral24

    • Target

      aminstall.dll

    • Size

      76KB

    • MD5

      b91f126675ef39f4ee46f877e230d255

    • SHA1

      2411fed6cbaf6cd80fbd374fa0af18a1280ec9b8

    • SHA256

      803606254069701d1e5e05cc7a5e98292145c42549d224e323be17b24d80c441

    • SHA512

      05e352cbb2f770a3a17021b9beb08877d14ab333c928b8bf0f393c5bd6a738fac4453e7661e5ad3340e886f3461a2050191a0284b1de8f761b2d6974703bb58c

    • SSDEEP

      768:MNV5rhiqaZ1V7V5yytiCLqmfTKeqvi8NT7jypjGZ1wZgH1Y10BlnkE52zGnApuxo:Mf5hgVXyy1luTXyVMwW1NkEQGnAp1cO

    Score
    3/10
    behavioral25behavioral26

    • Target

      Components/ChineseChess.html

    • Size

      10KB

    • MD5

      dbb2f48bb295adfb3bbb67fc97621549

    • SHA1

      052fa2c284ca64c21ef000b08fd8287642a6fe87

    • SHA256

      61a210a2af2a1db25869f6f02637add871fe3ae4917ce653c24f7d2a58a97b85

    • SHA512

      903179637d28ff38068dfdd94b0ce5bec7543e8f20a524f1ee1055e3b76a3c3af117690e4075dd9d44a5b9a83a1825e9ce004dc8824a9b9577c3cc48b8958e53

    • SSDEEP

      192:0gtLI6aiH1eaNfZMnM56SRIfk2s215mPiHNXWbDirRXwkqJ1TO5lNLegfXxt:9tLIPq0aNfZMnM56YSk2sELG3CN9S+X7

    Score
    1/10
    behavioral27behavioral28

    • Target

      eula.rtf

    • Size

      12KB

    • MD5

      ae76d989d2c7d5ef05170f26a8f8e1db

    • SHA1

      2ae3f1a1a3a32a0b3c27329f8976d4ad95295f6b

    • SHA256

      41f1c670e31ee7aad2e5650b4ec9c191b6eb449a91881a15ce75e7b4d6c01423

    • SHA512

      50ac0ea26e78c07814274b752b1ac383dc5f5244b748654feac24b96c92f00636c873651e6badd7259479da721bd5e4a2f783dc2ab5fecc9d8a7403a46aae0f4

    • SSDEEP

      192:eRbilZpp+xg6mAwzARwtkdwN/qOeUDfUYJlBC3+NPvT/xoy9SkLYtan:QaZNrACIs/qOzDPUwDZ

    Score
    4/10
    behavioral29behavioral30

    • Target

      readme.rtf

    • Size

      4KB

    • MD5

      6432cdba7130eba5d9c0ac3f9a6dc3a8

    • SHA1

      cd106f6001be974f17a54d96c02b4832fac4ccff

    • SHA256

      18a7916119b8b9a8553dc7101796329e530ff621342ecd76e22f64b8f1180d98

    • SHA512

      fe60ded84116076c51f4f8bdfc0147bac1c10498c5b830443241b5578911ec21293577eb8eb69e8481999b38b4e233f96d0e710265808e134b771a9ff66648cd

    • SSDEEP

      96:fRktdpeE9/YbsDvj/kf6fkDmwpm6nRtLAUT:fROeE9/CsD2awpJnDAC

    Score
    4/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks