Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    18677673a4fcc32c112683be8e3fb132_JaffaCakes118

  • Size

    11.6MB

  • Sample

    240628-cjhdcsvhlf

  • MD5

    18677673a4fcc32c112683be8e3fb132

  • SHA1

    32509dc3c7ef6f168208bc6113c39366430a7049

  • SHA256

    dbb4b94d0c47becbc462509af38fbc1a38a91809b44d318260e6a3c6e846749f

  • SHA512

    bbf7d37bd3a60bf31e6b897f8ba073ae19730c1046997aa329f5ef5b2d9b1c5bb084e7c4776a934d324a5c834e4cd509e3731175802976ee5b89f3523de8e8fc

  • SSDEEP

    196608:2WRlNkD3533EKQTzzDXMyUY/mB1iq67CPDKFXdim5BlIjdfZQ/dCXx8X0D47tNX1:2WcEHLXMyUY/6iD7CPD8d/5IzaJvBNX1

Score
7/10
upx

Malware Config

Targets

    • Target

      18677673a4fcc32c112683be8e3fb132_JaffaCakes118

    • Size

      11.6MB

    • MD5

      18677673a4fcc32c112683be8e3fb132

    • SHA1

      32509dc3c7ef6f168208bc6113c39366430a7049

    • SHA256

      dbb4b94d0c47becbc462509af38fbc1a38a91809b44d318260e6a3c6e846749f

    • SHA512

      bbf7d37bd3a60bf31e6b897f8ba073ae19730c1046997aa329f5ef5b2d9b1c5bb084e7c4776a934d324a5c834e4cd509e3731175802976ee5b89f3523de8e8fc

    • SSDEEP

      196608:2WRlNkD3533EKQTzzDXMyUY/mB1iq67CPDKFXdim5BlIjdfZQ/dCXx8X0D47tNX1:2WcEHLXMyUY/6iD7CPD8d/5IzaJvBNX1

    Score
    7/10
    • Loads dropped DLL

    • Target

      $PLUGINSDIR/BrandingURL.dll

    • Size

      4KB

    • MD5

      71c46b663baa92ad941388d082af97e7

    • SHA1

      5a9fcce065366a526d75cc5ded9aade7cadd6421

    • SHA256

      bb2b9c272b8b66bc1b414675c2acba7afad03fff66a63babee3ee57ed163d19e

    • SHA512

      5965bd3f5369b9a1ed641c479f7b8a14af27700d0c27d482aa8eb62acc42f7b702b5947d82f9791b29bcba4d46e1409244f0a8ddce4ec75022b5e27f6d671bce

    Score
    3/10
    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      325b008aec81e5aaa57096f05d4212b5

    • SHA1

      27a2d89747a20305b6518438eff5b9f57f7df5c3

    • SHA256

      c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b

    • SHA512

      18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf

    • SSDEEP

      192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo

    Score
    3/10
    • Target

      $SMPROGRAMS/Âå¿ËÈË2/ÐÂÔÆÈí¼þÏÂÔØ.lnk

    • Size

      344B

    • MD5

      4c2a7c403e0c28333f645a363f606da8

    • SHA1

      fe61f5e318e323fab9af329245e4bba6128aa5c6

    • SHA256

      c755fd0b870f2367e644f899afd720c4aee7b019b5584a14421c407e7910de14

    • SHA512

      8516481f41413d3ec958a07af39aad889840f964d7cb1f8027142f9c65abea9821e3bf2fcfdd9fb2b1c676031d3096d478bf06586deaaac05a7d451b0c2146e5

    Score
    3/10
    • Target

      Mame32.chm

    • Size

      115KB

    • MD5

      a197174720acb2e0917253e6c983ddb9

    • SHA1

      707dabc9c496239d818f57d6dcc9029350adfbe0

    • SHA256

      ad8b509ca1471c69c052230777cd14a5ae947e9e9a2ab3553be797c3b9af80a5

    • SHA512

      6952c3e703feee7e96e4a12e6443322e8629aa74104d806e6363d03eb79d6c9f309661d50f50257b4a526ca3b8dfdd7ef3e02fc096942686e1d25dcc9c957ab3

    • SSDEEP

      3072:0+QtQ9EkuJDop9QuUdr2pwCGTC+0vCC0PzJYOwMsU:0+QtQif+p9QttEXh+KezJH5

    Score
    1/10
    • Target

      kailleraclient.dll

    • Size

      31KB

    • MD5

      919aceb24360595da69d975e08a08ea5

    • SHA1

      15d2a05133047fabeee62de7d5df533106d29f2b

    • SHA256

      454440aeedb3b569bf49f11c953d0d5bb8ba42ff60d58c8ae6696eecc920280e

    • SHA512

      358fbcb31db1ab882c9ed7415be96962f5a22eec6417ef1537dff95271cee3cb4f7c8eb7685b8f5cdce316d530ac23ff303ace68d2cf83d8decb221b6789dbcb

    • SSDEEP

      768:2LiLjbKGY60H17PJc/TG0BXOZDRmDOCjq/:UK/Oh17PeqAgDRmal/

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      mame32k.exe

    • Size

      3.4MB

    • MD5

      635f4bedc82b1f90e40919130685e972

    • SHA1

      4e966f3dd0a3f4018f0af3e936deab90df6b9e70

    • SHA256

      bc3195c50eac0cbf4591bea14aa5666b7ec71c7a0c3185a4dd3a77608442726a

    • SHA512

      8f47d846afeffe4b0221ba9228588fbda11051040526c2194e313763b1ce9499443f80e223759e39ffcd8c36cffbacc82d7da5a73cf75e9e108102ce3b7f240a

    • SSDEEP

      49152:JYjAmLixk+br/lLH6CHBXB5tus9x2gLoMRRcU8SsdU6un+vQIas3uG0KbN:JY1ck+f9zTBxjnL2JU8e6pQM3N

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      uninst.exe

    • Size

      66KB

    • MD5

      0f41245212d62872820929a2cf5ec2bc

    • SHA1

      5d232092927a7a8ab1f128610af1b3affd916657

    • SHA256

      fb89af8a9da6bb598d80ce0d9f7fd30153481cb61c84544fe091c41aeb5fdb10

    • SHA512

      a79402a289cb5a8cecbcd7ae816d4bbd3bbda373b57a83d621f28b88bdf63a601c45c6ca8b393704637725496b99a71e103b9a282090b6f7f0793035f846dd00

    • SSDEEP

      1536:shq3+uta99Hj25XvwLXJLiFYRN6QcIwpl6Sx:OstajHKBvYXJLYq44Sx

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Target

      zip32.dll

    • Size

      132KB

    • MD5

      95a9097e1a76dfa1141eb8a6e3094e6a

    • SHA1

      3af4b2116d663dad207ab2aa0994ba78c58beec6

    • SHA256

      76a5e818a126e420bff92c0da8faae6987a04fe273388da7d83cba7d30526e0f

    • SHA512

      df86defc1f2e0994c54b7cf544a892cbc9a743138cb2e38396b62d32e47871410c3b75586be78ba89777674fe1eee15af66407edb460b8db5c2496a62fe11332

    • SSDEEP

      3072:xJyyFyyqlFbPm+lmUE5gV1Y4P4csxMwUtYojrOV/k:DyyFyyqlFbPXlmvo1Y4wNMv

    Score
    3/10
    • Target

      ÐÂÔÆÈí¼þÏÂÔØ.lnk

    • Size

      344B

    • MD5

      4c2a7c403e0c28333f645a363f606da8

    • SHA1

      fe61f5e318e323fab9af329245e4bba6128aa5c6

    • SHA256

      c755fd0b870f2367e644f899afd720c4aee7b019b5584a14421c407e7910de14

    • SHA512

      8516481f41413d3ec958a07af39aad889840f964d7cb1f8027142f9c65abea9821e3bf2fcfdd9fb2b1c676031d3096d478bf06586deaaac05a7d451b0c2146e5

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks