Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

45042eccc4...18.exe

windows7-x64

7

45042eccc4...18.exe

windows10-2004-x64

7

$PLUGINSDI...ub.exe

windows7-x64

7

$PLUGINSDI...ub.exe

windows10-2004-x64

7

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...se.dll

windows7-x64

3

$PLUGINSDI...se.dll

windows10-2004-x64

3

$PLUGINSDI...se.rtf

windows7-x64

4

$PLUGINSDI...se.rtf

windows10-2004-x64

1

$PLUGINSDI...on.dll

windows7-x64

3

$PLUGINSDI...on.dll

windows10-2004-x64

3

$PLUGINSDIR/Math.dll

windows7-x64

3

$PLUGINSDIR/Math.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...se.rtf

windows7-x64

4

$PLUGINSDI...se.rtf

windows10-2004-x64

1

$PLUGINSDI...se.rtf

windows7-x64

4

$PLUGINSDI...se.rtf

windows10-2004-x64

1

$PLUGINSDI...se.rtf

windows7-x64

4

$PLUGINSDI...se.rtf

windows10-2004-x64

1

$PLUGINSDI...ib.dll

windows7-x64

3

$PLUGINSDI...ib.dll

windows10-2004-x64

3

$PLUGINSDI...se.rtf

windows7-x64

4

$PLUGINSDI...se.rtf

windows10-2004-x64

1

$PLUGINSDI...br.rtf

windows7-x64

4

$PLUGINSDI...br.rtf

windows10-2004-x64

1

$PLUGINSDI...pw.rtf

windows7-x64

4

$PLUGINSDI...pw.rtf

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    45042eccc4b8be680ccf2b33f2444a3d_JaffaCakes118

  • Size

    469KB

  • Sample

    240714-j68mdsvgmd

  • MD5

    45042eccc4b8be680ccf2b33f2444a3d

  • SHA1

    c2a159c920074a2abeb56fa74b05f71745b2720b

  • SHA256

    488c938e13a82908aaf0448e98aed340fd8f42b43ad726c1facfdd28773b2437

  • SHA512

    ca43cc76388174daed4ffdd6791d78f55ca75d9704b5db6c7f7efe5cbe1795eaf9c34b66794b8047491fa7f453e86da303c58c7f70f3bcdce9118bce5573dd27

  • SSDEEP

    12288:dfOsa9uw2HuFybubDbQpJDwmUN1g38XZpYJORiFKPI6x9:dfq2Sn+Dw/1bBPI6/

Score
7/10

Malware Config

Targets

    • Target

      45042eccc4b8be680ccf2b33f2444a3d_JaffaCakes118

    • Size

      469KB

    • MD5

      45042eccc4b8be680ccf2b33f2444a3d

    • SHA1

      c2a159c920074a2abeb56fa74b05f71745b2720b

    • SHA256

      488c938e13a82908aaf0448e98aed340fd8f42b43ad726c1facfdd28773b2437

    • SHA512

      ca43cc76388174daed4ffdd6791d78f55ca75d9704b5db6c7f7efe5cbe1795eaf9c34b66794b8047491fa7f453e86da303c58c7f70f3bcdce9118bce5573dd27

    • SSDEEP

      12288:dfOsa9uw2HuFybubDbQpJDwmUN1g38XZpYJORiFKPI6x9:dfq2Sn+Dw/1bBPI6/

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/ApStub.exe

    • Size

      63KB

    • MD5

      333b0495b49d3a8d9ad8722b276f3e8c

    • SHA1

      2496a84563f366ac9063dbc7e0c41b3e16e299bb

    • SHA256

      9ac9b2535939df47b944570ed9db7b8d41e84b47590cd51ad412ee7db4fa1d94

    • SHA512

      937445942fa4d563f87b2277047f79ac5e9602df24ea0aebdef4c6b02bc4f6e79649faf8477ed15b01f976b2d74582d188004002fc60edb2e41e8aa9d342fd72

    • SSDEEP

      1536:qpgpHzb9dZVX9fHMvG0D3XJBOdU/9rjd1V/DOSUvKIdf2w:ogXdZt9P6D3XJ9NhDmvKyOw

    Score
    7/10

    • Loads dropped DLL

    behavioral3behavioral4

    • Target

      $PLUGINSDIR/BrandingURL.dll

    • Size

      4KB

    • MD5

      71c46b663baa92ad941388d082af97e7

    • SHA1

      5a9fcce065366a526d75cc5ded9aade7cadd6421

    • SHA256

      bb2b9c272b8b66bc1b414675c2acba7afad03fff66a63babee3ee57ed163d19e

    • SHA512

      5965bd3f5369b9a1ed641c479f7b8a14af27700d0c27d482aa8eb62acc42f7b702b5947d82f9791b29bcba4d46e1409244f0a8ddce4ec75022b5e27f6d671bce

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/CustomLicense.dll

    • Size

      4KB

    • MD5

      ca37f2747e04ae09ae9f14852574abef

    • SHA1

      e40bf34907337340520f368575c848ddb62f98c5

    • SHA256

      bbcab5c7e9f4b3f63184b23995e5b335a1c6ca5108aaa1be0eaf3fbf78afc1c4

    • SHA512

      ea781e646313bc458fba0ce66e357818725f385cb6c3383bb9c41dbb5221a6f43e3d8296aa3cbd5e8759d95d87a8eefa5f87665912fbc65c8eb4efcacabfdb60

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/DefaultTab_license.rtf

    • Size

      14KB

    • MD5

      b97839b3cfe1f7e62ef09d5a2815ed81

    • SHA1

      e569ba28d4a88a6e23551b96b3cec0e710b99487

    • SHA256

      f2c89065a00e08202756cb383d3092b685dcec2075314f494df71bf8ec01fd11

    • SHA512

      227a2a1b5322dd183ca7463aec8613447b8670e97011e26286d2718571ca76a6206493aee2bb3c747bdd28892ee9820e3da58e3e69e0d42051e26b112aabc221

    • SSDEEP

      384:ZrPL4Pgxpgc7u2ucXCN6CCnNA9NDrclFyLkH4A2:9Og3gwu2u3N6CCnNAfAjHS

    Score
    4/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/GetVersion.dll

    • Size

      6KB

    • MD5

      5264f7d6d89d1dc04955cfb391798446

    • SHA1

      211d8d3e7c2b2f57f54a11cb8bc4fa536df08acc

    • SHA256

      7d76c7dd8f7cd5a87e0118dacb434db3971a049501e22a5f4b947154621ab3d4

    • SHA512

      80d27ee2f87e2822bd5c8c55cc3d1e49beebb86d8557c92b52b7cbea9f27882d80e59eefa25e414eecee268a9a6193b6b50b748de33c778b007cde24ef8bcfb7

    • SSDEEP

      96:E12Z84uiwpGTVTDSpaHYfniz0R3GhCvXY6Ix5vdR7pBi46AQ5Vu4:2STVTGwYhR3GhCvy5vH7pBi46AQ5Vu

    Score
    3/10
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/Math.dll

    • Size

      66KB

    • MD5

      b140459077c7c39be4bef249c2f84535

    • SHA1

      c56498241c2ddafb01961596da16d08d1b11cd35

    • SHA256

      0598f7d83db44929b7170c1285457b52b4281185f63ced102e709bf065f10d67

    • SHA512

      fbcb19a951d96a216d73b6b3e005338bbb6e11332c6cc8c3f179ccd420b4db0e5682dc4245bd120dcb67bc70960eab368e74c68c7c165a485a12a7d0d8a00328

    • SSDEEP

      1536:0P43WZ4Ql60gam+2MwRmPeqFVHbQH0ZZ1Iet:0wU609VMH0T/t

    Score
    3/10
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/UserInfo.dll

    • Size

      4KB

    • MD5

      7579ade7ae1747a31960a228ce02e666

    • SHA1

      8ec8571a296737e819dcf86353a43fcf8ec63351

    • SHA256

      564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5

    • SHA512

      a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b

    Score
    3/10
    behavioral17behavioral18

    • Target

      $PLUGINSDIR/fm_license.rtf

    • Size

      73KB

    • MD5

      4a6d1534a2473f9b4655920eceb4f424

    • SHA1

      10bd36482cecfd0ed5a9794bdb2005b8162a8ca7

    • SHA256

      a5e7ec057431a4866922b12373f39f8e3412e40d6b2f5471e08dc83abdce4a6c

    • SHA512

      a11606e3714e6552fc62089747ebc9e880932ffe6a49705311efca8b3a671f46c85507aa72a2a0f126558be68dcb22d9d1b672ffe8455fa72fd4838366eaa9de

    • SSDEEP

      1536:Cp6nbg4Mdj7eHJm4ZFIcQtesQ1EJcdTc/FcT:CMnbg4MYr99YQ

    Score
    4/10
    behavioral19behavioral20

    • Target

      $PLUGINSDIR/frg_license.rtf

    • Size

      57KB

    • MD5

      7be0f88cc380caaf3efc805e14eb3c9b

    • SHA1

      28cfb260e938a81bd4eada0099e397ec83f2e619

    • SHA256

      5101a990a7d78e415958a8e803fae4b4a1de3601d9fb37dbb55f85e0644a85a3

    • SHA512

      a307c461dbb171f88972e2220a07f307a1f006f00a0369a935fb33c9af4d4cef62cc2e05ec9a9d84376778556ed201d10884319fbf9b35581bce71cbbf771c4c

    • SSDEEP

      768:GH6OyQAoYRJQQA5Vq7MYQQA5VqKMPQQA5Vq7MPQQA5VqUMPQQA5VqT81O3idRfOE:SpsxIUhd

    Score
    4/10
    behavioral21behavioral22

    • Target

      $PLUGINSDIR/gc_license.rtf

    • Size

      14KB

    • MD5

      5190bd8d892384b72d0a7f5eb4364eb0

    • SHA1

      4960e2af31f9dc90f6c8f864b8fb865150e76e97

    • SHA256

      cd47392546a0b63061e33a431debd341f21755d794b59d14b6272ae895725db3

    • SHA512

      718bd94078f78f074d6dee299aadd12041e1b7cee9a51aa8ce320477845d627259da76239ac1f10a87dd90135c1a9c83f65ddd6dc1eac4d18ef210a3cd2b6295

    • SSDEEP

      384:PMxEXYxvXulMRXk///JGGl/q7yJQCTLDJTLSjYC12xx:VXYx2lW0/3JGGl/q76QCTPJTWYC12xx

    Score
    4/10
    behavioral23behavioral24

    • Target

      $PLUGINSDIR/intlib.dll

    • Size

      24KB

    • MD5

      1efbbf5a54eb145a1a422046fd8dfb2c

    • SHA1

      ec4efd0a95bb72fd4cf47423647e33e5a3fddf26

    • SHA256

      983859570099b941c19d5eb9755eda19dd21f63e8ccad70f6e93f055c329d341

    • SHA512

      7fdeba8c961f3507162eb59fb8b9b934812d449cc85c924f61722a099618d771fed91cfb3944e10479280b73648a9a5cbb23482d7b7f8bfb130f23e8fd6c15fb

    • SSDEEP

      384:XErRo4TdlKCdUk6qz46qu2vPqUcnlSHmkuPJOiya4fF0Ac9khYLMkIX0+GvBgK3M:XiRoW7Kc5bBq1qNlSHmkuPJOJa4f4CD

    Score
    3/10
    behavioral25behavioral26

    • Target

      $PLUGINSDIR/jp_license.rtf

    • Size

      47KB

    • MD5

      2295052cf62645dba3faf2eda7615284

    • SHA1

      35a12753dab4c8c038112264b392e3568bebf2b9

    • SHA256

      f35bd0bb83bd565b5830df90a0280726746c523ac00c34f7a8211d92ed371de9

    • SHA512

      fe71413c234354551fd350921c42edc3dd042f3ef7272189b3d8195dcf605420fa6734e315f194c26bcf9b4327ae7c0f7475c1b573656e69d26348924707227d

    • SSDEEP

      768:gEz9fy2DcPMRC90OtKWcURiuowatg14J4bR0+2he7tsGUY60V+Sd6GvzWG6idwxa:By7yGCGJ9mm

    Score
    4/10
    behavioral27behavioral28

    • Target

      $PLUGINSDIR/license_pbr.rtf

    • Size

      65KB

    • MD5

      d27946865ca1eadb4e44ed2f0a612cb6

    • SHA1

      3b764b75d8ef713d0f338227aae7dd11ae4427c1

    • SHA256

      45df50add034de53c266945c24181160d308342e848872b133effc1077fe02ee

    • SHA512

      d18f9e9165ad96634b2ded4ef3a772156329a69ed6680f1a65bd016bbe2789d9115a1b05af469e37333294ad7e330a35b3813911a546f04226e9faef5b209238

    • SSDEEP

      768:je6mikHrBLxRYMHX6YXL5UMHX6YhL5UMHX6YyLvRYMHX6YJZcXlBGBBuBLxRYMHf:Sn4vtybALZiLiSxp7kDe

    Score
    4/10
    behavioral29behavioral30

    • Target

      $PLUGINSDIR/license_pw.rtf

    • Size

      27KB

    • MD5

      1397d6205e393a50b8ed0b98bff4310f

    • SHA1

      7eee5db6caea6603b3c21c65d6b3600d806916ba

    • SHA256

      d74e676b28dcae57df5027f4167b107a4597a9ab99754d5844ae639b88e5ec85

    • SHA512

      5bc18c65300ac2e0174f5a90002e9a9915c54efadc64d6d078fd4875412b5042e2e61d9a9a83cfedee596bce41eb5210b65f699a764fb8ae319a3031b99c8e95

    • SSDEEP

      768:ExgL1TtcaEN0L25ovNmkRi6dHnlFarvevr2k:dsN35ov4kRi6dHlFarvevH

    Score
    4/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks