Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    36f1e07ff32336cb803034645dd643b2_JaffaCakes118

  • Size

    5.3MB

  • Sample

    240711-advqdsxfmk

  • MD5

    36f1e07ff32336cb803034645dd643b2

  • SHA1

    0667551d99afcb01ed2649b05ab864ee6de527b4

  • SHA256

    df8d5c1e306475f776e460ad64c54e8ecc09326dfd4bb95994528dd08c04ef9f

  • SHA512

    66faea7dd3d0304cd12650589e50f2c2f0b824e690810a2da5582a627847f8a804cb79731ae6f663694d986dbd90270963300c218e465c0fa6a0f56bac39fe53

  • SSDEEP

    98304:gosr9e5MlJuo+xfBR/paUA6eGfkhLPPnjrdlJ4v1V6mw8te:z55vf3AUAefS4v1JXe

Score
7/10
upx

Malware Config

Targets

    • Target

      36f1e07ff32336cb803034645dd643b2_JaffaCakes118

    • Size

      5.3MB

    • MD5

      36f1e07ff32336cb803034645dd643b2

    • SHA1

      0667551d99afcb01ed2649b05ab864ee6de527b4

    • SHA256

      df8d5c1e306475f776e460ad64c54e8ecc09326dfd4bb95994528dd08c04ef9f

    • SHA512

      66faea7dd3d0304cd12650589e50f2c2f0b824e690810a2da5582a627847f8a804cb79731ae6f663694d986dbd90270963300c218e465c0fa6a0f56bac39fe53

    • SSDEEP

      98304:gosr9e5MlJuo+xfBR/paUA6eGfkhLPPnjrdlJ4v1V6mw8te:z55vf3AUAefS4v1JXe

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      325b008aec81e5aaa57096f05d4212b5

    • SHA1

      27a2d89747a20305b6518438eff5b9f57f7df5c3

    • SHA256

      c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b

    • SHA512

      18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf

    • SSDEEP

      192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo

    Score
    3/10
    • Target

      MediaInfo.dll

    • Size

      545KB

    • MD5

      6ec40f6a2ac2ad1b3eb61b0ff6e0a42a

    • SHA1

      d9385b8c6ae8c90b8305aa1da7f62cd8038d8134

    • SHA256

      f8e03c0035c917746d6b8855d595c1732cc49821f5fbdc722dccbb447f58560a

    • SHA512

      4a008dee40d60b310108030f0e3a38b8387b36923ed0c567de7eaa928d0a3c3d4440112110fe7a607d2f531b67cc0d1b4783f12cf3f36b09616a456d47bd7bcd

    • SSDEEP

      12288:MYVj6mhnSjOrBaBd4fRw9grVEDisIL5m/QUDzxkw/Og6zg1I6d/oST:MYE/CU6ZnrVEDisCmISbcx6

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      Uninst.exe

    • Size

      37KB

    • MD5

      0d3b187c4fbde817c5b46f60bb18738c

    • SHA1

      8d2c75332908a6dbe78baaf4cd498c419fca353d

    • SHA256

      37cadac7696f2cf57a15c58bf586ac7addd56111822d18574572f97cd72171fd

    • SHA512

      d45f11bebe05f94fb57f11111e0e49d2ba59294cf9c1e80a8046bd4c8d96816a5773e3a30bb8519fca029ed9da12fa902b74abd69af87a69cb2a8a64b813e9c7

    • SSDEEP

      768:L3CPkfOnbmBk1l180vzdvDw6+nbcuyD7U7g/2iZvAm6kRRI+6LJRnZV:mEOnnptDwBnouy87g/L1As6VV

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      dp_fastvideoconvert.exe

    • Size

      233KB

    • MD5

      94309f26b4bc5397f77d91dddad99a67

    • SHA1

      673b15cfcee607afa7585ac955b74261d8286381

    • SHA256

      7247442aca8e8c822b70f183f6d8565536795afbb891aa34f5ab8dfe9f620202

    • SHA512

      bd975797568f60116818ea84ecd064c9ee0dc354353ff6f5a8169469921dd48eff6ca6bf39f74560a119d81802967e951828d36c5cb5359d223c464a72a99b1e

    • SSDEEP

      6144:E/Zu8ssUzXaqY0fAIb/G2bCBLr4s7BEbbx00pNISKaRDHMTGsVro:c1bUzsStEhO20ff59MTJ

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target

      mencoder.exe

    • Size

      4.4MB

    • MD5

      80adb546110293c22f7db930d812b35a

    • SHA1

      153bfd273b9249ad942f045b1b5c8f85c531753f

    • SHA256

      ab130686715667b3c98dfc7a0afbf5ea6a5b4c02806a4fbe62fea15044b62a7b

    • SHA512

      aea9774f392028745494e1307c57bf7cef80de1da0cb876f29f0493f6fb6b3a4e81691b748cacf383620fa597f26eb2f27486e37fa953afe973c810f8876067d

    • SSDEEP

      98304:TML/+BLn4R+ua/O1RLftUiwjNj8GYl23dkBmRKvHX:/nYO/OXfT23d/M

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      pthreadGC2.dll

    • Size

      35KB

    • MD5

      2aaafd23e9a77dd8fc3d73a45cfeac01

    • SHA1

      f41ebb61094231af29dc378c1a2c8620102eb58c

    • SHA256

      cd4104379b2aac36b2465623540e30052b2b44f90229709e7d0c65c98394fc05

    • SHA512

      ccd398eaf34c3b2b402e7cbd447fcb0819077ed7ed6c2e874fa72ffead14facef830b864014e3d5b399a8b52561dd0000251177fdb6e027451043a265ab731f3

    • SSDEEP

      384:6XKAwDe/yMw0U0GuOI+KDYZ1EWsLKkSqPmMmg2oes9yzCuFYh3oDqLjBISO0IqMU:6XKAm0UsO76WsxDmELsCDIMiH3YN

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks