Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

3571e8cfb2...18.exe

windows7-x64

7

3571e8cfb2...18.exe

windows10-2004-x64

7

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$TEMP/firefox.vbs

windows7-x64

7

$TEMP/firefox.vbs

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3571e8cfb2ac721f38aa711380670d45_JaffaCakes118

  • Size

    148KB

  • Sample

    240710-tlq7qaxblr

  • MD5

    3571e8cfb2ac721f38aa711380670d45

  • SHA1

    ad69089f825f4f1217dac6c4336c98633090dbd0

  • SHA256

    94bafd8f48d59d13951e59a5d657c71a3f4f922a7d51f6d4af6db1de48109754

  • SHA512

    1c6f2863fa721eeaa725fa4e69b126526d29b9579d06fa972bd2eef8745574335319c5854c8d589766c154f46f4b1b1361fc42a7326e45c841cc3e952aa7dcaf

  • SSDEEP

    3072:kO1zQzGxo3BJZ45/aULZboiWKumAyw0KtCCax1KzzFaw8yv:k+o31+ZTu3ywRVax16vtv

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      3571e8cfb2ac721f38aa711380670d45_JaffaCakes118

    • Size

      148KB

    • MD5

      3571e8cfb2ac721f38aa711380670d45

    • SHA1

      ad69089f825f4f1217dac6c4336c98633090dbd0

    • SHA256

      94bafd8f48d59d13951e59a5d657c71a3f4f922a7d51f6d4af6db1de48109754

    • SHA512

      1c6f2863fa721eeaa725fa4e69b126526d29b9579d06fa972bd2eef8745574335319c5854c8d589766c154f46f4b1b1361fc42a7326e45c841cc3e952aa7dcaf

    • SSDEEP

      3072:kO1zQzGxo3BJZ45/aULZboiWKumAyw0KtCCax1KzzFaw8yv:k+o31+ZTu3ywRVax16vtv

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      79KB

    • MD5

      f7902c17e252d1200eabb3416da5799c

    • SHA1

      348740ffdaf35870c307e0bca270b511c3dd6b6f

    • SHA256

      3f68a157046e58f9f04d1361ef8bbac46435f242f0a3d9196917466061a54465

    • SHA512

      26a5b86d292bac87f1baf7d79482d21ba9da731a795f70c40446ac52f6cde0a0a103ce94b87866fff868bf3bc1fe55e5f9ba95682ef025faa44901c1d8122cfb

    • SSDEEP

      1536:WEvXaE4RRX5V1QGJkcQ5qm0NRUgn7OKg:uE4Rp5UEeyUgn7OKg

    Score
    3/10
    behavioral3behavioral4

    • Target

      $TEMP/firefox.vbs

    • Size

      1KB

    • MD5

      7513b697b3e19834b490d790cbadffba

    • SHA1

      e347c3e4cabd1fdc395f9652aeaabddc9b4e93c1

    • SHA256

      f8253d735820824a0a46ec74512404dd89cd13dec098c03d0f2bb2f57dada4e5

    • SHA512

      9bd12277609d015fdf16a763a306a3ed705af0865808856626b34fc602b5d2bce4977ea7e5f7048a73c1c8b7d895c202114f13882ee19ba7f7850415c0501b4a

    Score
    7/10
    spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks