Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

3f50e640e4...18.exe

windows7-x64

7

3f50e640e4...18.exe

windows10-2004-x64

7

$PLUGINSDI...ol.dll

windows7-x64

3

$PLUGINSDI...ol.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows7-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

$PLUGINSDIR/UAC.dll

windows7-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

lzma.exe

windows7-x64

1

lzma.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3f50e640e44b44ce2e0044230131f5ed_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240712-3kt2naxhmc

  • MD5

    3f50e640e44b44ce2e0044230131f5ed

  • SHA1

    ffe3c32ed385410e1898175d531f4ed43bc87cce

  • SHA256

    9a49c02ff9257c1b58b2c388e03b6ed0c545726c108fcd8eac3a080b96ce4f34

  • SHA512

    9e98f514a29eba6323af1b3925f268c785552849ed9f97f6ad5594977fdc0bb46dcf451875b61dbd0a022071ab48ccfb3a4d9fd836b98f4762f6d257027754a4

  • SSDEEP

    24576:sQ+k0qiQ30FV4I4OIVWKoLUe8MEzyW7ThAP+idhkMiKm8iOnz1R27:BFDiVFVeOMWKmKhyWP+P+mhk3Mvn5g7

Score
7/10

Malware Config

Targets

    • Target

      3f50e640e44b44ce2e0044230131f5ed_JaffaCakes118

    • Size

      1.1MB

    • MD5

      3f50e640e44b44ce2e0044230131f5ed

    • SHA1

      ffe3c32ed385410e1898175d531f4ed43bc87cce

    • SHA256

      9a49c02ff9257c1b58b2c388e03b6ed0c545726c108fcd8eac3a080b96ce4f34

    • SHA512

      9e98f514a29eba6323af1b3925f268c785552849ed9f97f6ad5594977fdc0bb46dcf451875b61dbd0a022071ab48ccfb3a4d9fd836b98f4762f6d257027754a4

    • SSDEEP

      24576:sQ+k0qiQ30FV4I4OIVWKoLUe8MEzyW7ThAP+idhkMiKm8iOnz1R27:BFDiVFVeOMWKmKhyWP+P+mhk3Mvn5g7

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/AccessControl.dll

    • Size

      10KB

    • MD5

      055f4f9260e07fc83f71877cbb7f4fad

    • SHA1

      a245131af1a182de99bd74af9ff1fab17977a72f

    • SHA256

      4209588362785b690d08d15cd982b8d1c62c348767ca19114234b21d5df74ddc

    • SHA512

      a8e82dc4435ed938f090f43df953ddad9b0075f16218c09890c996299420162d64b1dbfbf613af37769ae796717eec78204dc786b757e8b1d13d423d4ee82e26

    • SSDEEP

      192:8SEWBGgiJM4LN+xq56XdNcNz/NWdlJmlyOcROQ:8SEPgii9KTzyt

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/DcryptDll.dll

    • Size

      18KB

    • MD5

      85fec7a3cf730498d9eb668d95475ca0

    • SHA1

      22ed4eeda3e859c39cffd7b83219b9df83b73cc4

    • SHA256

      68c8db0ba5bc16e25c8b070167bed50300d7c59fe4915dd1921f57c464208ef2

    • SHA512

      95aa1d400572de2b527ac00973bede213f573eb926cbd5ff761d55becd0c6ccb09cea5ebefd833f0cae7435d8b6310b5981d0e2d69379b7b1a1452fe625dd503

    • SSDEEP

      384:2ZyQSewDbPmRqcXx2kMPrd9cbkUmR08EMg6:2btwnmR/xQdckUSEMg6

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      325b008aec81e5aaa57096f05d4212b5

    • SHA1

      27a2d89747a20305b6518438eff5b9f57f7df5c3

    • SHA256

      c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b

    • SHA512

      18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf

    • SSDEEP

      192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/UAC.dll

    • Size

      13KB

    • MD5

      7f56c0d6a8733dec142814ed5a58b0ee

    • SHA1

      c119e66f179cfb758966f3cf878466057bea1840

    • SHA256

      86445396775370aff5834f10bda25e505b6f89efc69a04fe1ce46f5d128be73f

    • SHA512

      8b3b9bed985b3583b7be8b2197bb068e5d5508f8b5c4a7fc1278b2662dc8d9a53fd6df63f636e44bfc5aa37f030ac76b8d259d6b446bf87d5c72b74ff5b158f3

    • SSDEEP

      384:d/lNMKbnRWKYyCvDvQH3yBf/qPNGkVWYyLrcMf9VQ8c:d/lq+RDYJf/qPNGkQ5LrcCQ

    Score
    3/10
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      c10e04dd4ad4277d5adc951bb331c777

    • SHA1

      b1e30808198a3ae6d6d1cca62df8893dc2a7ad43

    • SHA256

      e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a

    • SHA512

      853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e

    • SSDEEP

      96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420

    Score
    3/10
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      acc2b699edfea5bf5aae45aba3a41e96

    • SHA1

      d2accf4d494e43ceb2cff69abe4dd17147d29cc2

    • SHA256

      168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e

    • SHA512

      e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe

    • SSDEEP

      96:M7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgNk32E:eKgfwgcr8zylsB49Ud0qJVgNX

    Score
    3/10
    behavioral15behavioral16

    • Target

      Uninstall.exe

    • Size

      51KB

    • MD5

      006d6d8b606e66a547866fa7e67fc809

    • SHA1

      14c1616880cdc4298aa093cf8dcec8b25a8442f2

    • SHA256

      0b27dc552c06608edd450c89865f1728fa0d37daec77c6b56094de1de96452dd

    • SHA512

      57f85b1ca1a2f3f91ba4b68a1f383367436b9f30698ef56dbd8c16718bac328075e1d3bcee064716b9c2b8bf72b8ffc67ac7559cf77a2d1a7f223e97e62b30ff

    • SSDEEP

      768:P4wO7XBz+5Qm3W0tYdrQZHV4EWuWEUOg4jjfS3XJ+lwlKhqc5rQ9NCC1Vhb0uip7:wLXB65939tY6HBg4sXJJlQGl1VhbGEd2

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral17behavioral18

    • Target

      $PLUGINSDIR/UAC.dll

    • Size

      13KB

    • MD5

      7f56c0d6a8733dec142814ed5a58b0ee

    • SHA1

      c119e66f179cfb758966f3cf878466057bea1840

    • SHA256

      86445396775370aff5834f10bda25e505b6f89efc69a04fe1ce46f5d128be73f

    • SHA512

      8b3b9bed985b3583b7be8b2197bb068e5d5508f8b5c4a7fc1278b2662dc8d9a53fd6df63f636e44bfc5aa37f030ac76b8d259d6b446bf87d5c72b74ff5b158f3

    • SSDEEP

      384:d/lNMKbnRWKYyCvDvQH3yBf/qPNGkVWYyLrcMf9VQ8c:d/lq+RDYJf/qPNGkQ5LrcCQ

    Score
    3/10
    behavioral19behavioral20

    • Target

      lzma.exe

    • Size

      63KB

    • MD5

      1c4d758c0954e843d2fa22703f653421

    • SHA1

      d577e6f63cb53f5f68f094b9fbaefe5b0087e933

    • SHA256

      f776415281ed68268577142b60839d0937c112be1ba0fb8470f5a387afc3ba62

    • SHA512

      5b8c02473b8f57d243cac5ae1f5381a9a1dbd55bc976a172f36060b2d0c2ad80d4f956cd38d4ba7434b9b27583e0e753bcdb8b4772c1c54e926b365c90357c3e

    • SSDEEP

      1536:ax7F8DW6pErklzKbDir++/McTJctWOrLRCIbDO+9a:akDWTrMKb2MFQCRCIe+4

    Score
    1/10
    behavioral21behavioral22

MITRE ATT&CK Enterprise v15

Tasks