Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

3f5886747e...18.exe

windows7-x64

7

3f5886747e...18.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...on.dll

windows7-x64

7

$PLUGINSDI...on.dll

windows10-2004-x64

7

SmartTipC.exe

windows7-x64

1

SmartTipC.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3f5886747e41575d3b459d9637a9b812_JaffaCakes118

  • Size

    381KB

  • Sample

    240712-3rp2aawdjr

  • MD5

    3f5886747e41575d3b459d9637a9b812

  • SHA1

    cce034dcd6f632bda6214a5872ff1be5bcea10c2

  • SHA256

    5d5ed938a3f2c8cf547f5a14fc2523f88d0aacb6101a9d0375c9523761698d87

  • SHA512

    22b7ff028a62b20cbbe5fd46030ad041fe2f7cc84b72ff9a8816bc4ede285915c77144b6c8598c825a725cf30254dd17533d583e297fca86265da335859ca948

  • SSDEEP

    6144:qFJ0Q3CVSCr7p0XFaE8V3u8TYg58E+su8Uu1oyb7kEOgpVXGeCz6z:K3z8KFadV3FMguE+PooY7kqOeCz6z

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      3f5886747e41575d3b459d9637a9b812_JaffaCakes118

    • Size

      381KB

    • MD5

      3f5886747e41575d3b459d9637a9b812

    • SHA1

      cce034dcd6f632bda6214a5872ff1be5bcea10c2

    • SHA256

      5d5ed938a3f2c8cf547f5a14fc2523f88d0aacb6101a9d0375c9523761698d87

    • SHA512

      22b7ff028a62b20cbbe5fd46030ad041fe2f7cc84b72ff9a8816bc4ede285915c77144b6c8598c825a725cf30254dd17533d583e297fca86265da335859ca948

    • SSDEEP

      6144:qFJ0Q3CVSCr7p0XFaE8V3u8TYg58E+su8Uu1oyb7kEOgpVXGeCz6z:K3z8KFadV3FMguE+PooY7kqOeCz6z

    Score
    7/10
    discoveryupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      44KB

    • MD5

      3599d30554ad65dc29fc689217d2152e

    • SHA1

      8f5fcc313b667a1de2d56573bcf98d43fd0d4ff9

    • SHA256

      1af3ac7d3176af42e8594ba0c33821d3318f4eea5cbb799bf8fab58e480efe0e

    • SHA512

      846776b1d908b5204667715ffdfd3a6c76dface1677e8b1e5156ceac2ef0a739f68b48ccbb919c9e08d6ff359a93174bf0b90def7d48cee54cd3c41d8d8575f2

    • SSDEEP

      768:oY6+2hD1lu3SFh80Z9pe7nJRJ3QN8DOUVowlo+J:76xhZlM0h/9panJ73CSFl

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      e54eb27fb5048964e8d1ec7a1f72334b

    • SHA1

      2b76d7aedafd724de96532b00fbc6c7c370e4609

    • SHA256

      ff00f5f7b8d6ca6a79aebd08f9625a5579affcd09f3a25fdf728a7942527a824

    • SHA512

      c9ddd19484a6218f926295a88f8776aff6c0a98565714290485f9b3b53e7b673724946defed0207064d6ab0b1baa7cb3477952f61dbe22947238d3f5802fa4f4

    • SSDEEP

      96:57GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgN532E:VKgfwgcr8zylsB49Ud0qJVgNQ

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/version.dll

    • Size

      6KB

    • MD5

      ebc5bb904cdac1c67ada3fa733229966

    • SHA1

      3c6abfa0ddef7f3289f38326077a5041389b15d2

    • SHA256

      3eba921ef649b71f98d9378dee8105b38d2464c9ccde37a694e4a0cd77d22a75

    • SHA512

      fa71afcc166093fbd076a84f10d055f5a686618711d053ab60d8bd060e78cb2fdc15fa35f363822c9913413251c718d01ddd6432ab128816d98f9aabf5612c9f

    • SSDEEP

      96:nPtMckE1e91BopVyXwUhn3f1I0vOKeoqO4d8QvS9:n1MMuOUhdI0c04yV9

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral10behavioral9

    • Target

      SmartTipC.exe

    • Size

      718KB

    • MD5

      deb65fd1d5fa1828c005f6a4adf91d4c

    • SHA1

      7fd244f1e024552ab68e7d4e83750b99a0fe6a02

    • SHA256

      9a5e776bb42f63bc8e14c82d0275a3439f940eb98ea62348b50576f65c3b38ac

    • SHA512

      dc29bc568a469aeab28c2842f5b9ba8141b92478eb414e843168fdfc90535bb6bafdac8a58728dbe94206b0bf16fdc6ec4bde79f3f35d28d033193876a5dd339

    • SSDEEP

      6144:ClELF2lwDy6nVusULi0MUvERlZURq0MB7h5Ptk4zXlY/M0QoVUNUsWTBVx5Pc1Un:CAFh08lh5NzXlY/MToucBVxGC/QE

    Score
    1/10
    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks