1898c537d2b5d3e4085dd5f8d574a9b53ec1dd0fbc201dde3ae85777f2f57e8b | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

32087ae9d6...18.exe

windows7-x64

7

32087ae9d6...18.exe

windows10-2004-x64

7

Sharing

General

Target

32087ae9d6ef097b8a467f25af28203b_JaffaCakes118
Size

405KB
Sample

240709-z9qtraybnh
MD5

32087ae9d6ef097b8a467f25af28203b
SHA1

a9d39593507f6e5647d42c53e9eab5ce07ced744
SHA256

1898c537d2b5d3e4085dd5f8d574a9b53ec1dd0fbc201dde3ae85777f2f57e8b
SHA512

78f410bf8116e9e9c82d7343a7d1bfebfe7b0caafba638a2ada5ab5291ded24dd78d1f4a6b438ee4134decdda7bd1194c78adb954d2587ffac519810d7eaf503
SSDEEP

6144:N+n6P42fVm9K/fNX/YpCyTZuFsWOoS/U90Obdul9a1yl+aqlTt3/airzp6cjcI:86LN3pWtvoS/U6h9aqJqlTwkzp

Score

7^/10

adware stealer upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

32087ae9d6ef097b8a467f25af28203b_JaffaCakes118.exe

Resource

win7-20240705-en

adware stealer upx

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

32087ae9d6ef097b8a467f25af28203b_JaffaCakes118.exe

Resource

win10v2004-20240709-en

adware stealer upx

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  32087ae9d6ef097b8a467f25af28203b_JaffaCakes118
- Size
  
  405KB
- MD5
  
  32087ae9d6ef097b8a467f25af28203b
- SHA1
  
  a9d39593507f6e5647d42c53e9eab5ce07ced744
- SHA256
  
  1898c537d2b5d3e4085dd5f8d574a9b53ec1dd0fbc201dde3ae85777f2f57e8b
- SHA512
  
  78f410bf8116e9e9c82d7343a7d1bfebfe7b0caafba638a2ada5ab5291ded24dd78d1f4a6b438ee4134decdda7bd1194c78adb954d2587ffac519810d7eaf503
- SSDEEP
  
  6144:N+n6P42fVm9K/fNX/YpCyTZuFsWOoS/U90Obdul9a1yl+aqlTt3/airzp6cjcI:86LN3pWtvoS/U6h9aqJqlTwkzp
Score

7^/10

adware stealer upx
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Deletes itself
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarestealerupx

behavioral2

adwarestealerupx

© 2018-2025

Terms | Privacy