Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    46e8b747b9b01e85a56e92c4bb45ee0c_JaffaCakes118

  • Size

    371KB

  • Sample

    240714-wl6zaatflc

  • MD5

    46e8b747b9b01e85a56e92c4bb45ee0c

  • SHA1

    54e27ab133166c6b39cab2ee0aa720fd6b4ad149

  • SHA256

    2cb127d9fe410b16a83c525067d705aa2363b8db9881f4eff4f98e688c9c4778

  • SHA512

    691a5d6f62000e74ec5497364276b78bfef849f86125191116377ebe01047bb871b28dd0cc49307a166210c9e30430acaa2998ebe82d0ac7c27de5285e9845a3

  • SSDEEP

    6144:ReTeM/f+lshe/4u9qHO3YWP/9ZedHbrCf4ajE4u/PalqCJD+67RFAZ0u96:FMH+lsgfDTqS4v4u/neS67rAB6

Score
7/10

Malware Config

Targets

    • Target

      46e8b747b9b01e85a56e92c4bb45ee0c_JaffaCakes118

    • Size

      371KB

    • MD5

      46e8b747b9b01e85a56e92c4bb45ee0c

    • SHA1

      54e27ab133166c6b39cab2ee0aa720fd6b4ad149

    • SHA256

      2cb127d9fe410b16a83c525067d705aa2363b8db9881f4eff4f98e688c9c4778

    • SHA512

      691a5d6f62000e74ec5497364276b78bfef849f86125191116377ebe01047bb871b28dd0cc49307a166210c9e30430acaa2998ebe82d0ac7c27de5285e9845a3

    • SSDEEP

      6144:ReTeM/f+lshe/4u9qHO3YWP/9ZedHbrCf4ajE4u/PalqCJD+67RFAZ0u96:FMH+lsgfDTqS4v4u/neS67rAB6

    Score
    7/10
    • Loads dropped DLL

    • Target

      $PLUGINSDIR/BrandingURL.dll

    • Size

      4KB

    • MD5

      71c46b663baa92ad941388d082af97e7

    • SHA1

      5a9fcce065366a526d75cc5ded9aade7cadd6421

    • SHA256

      bb2b9c272b8b66bc1b414675c2acba7afad03fff66a63babee3ee57ed163d19e

    • SHA512

      5965bd3f5369b9a1ed641c479f7b8a14af27700d0c27d482aa8eb62acc42f7b702b5947d82f9791b29bcba4d46e1409244f0a8ddce4ec75022b5e27f6d671bce

    Score
    3/10
    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      0dc0cc7a6d9db685bf05a7e5f3ea4781

    • SHA1

      5d8b6268eeec9d8d904bc9d988a4b588b392213f

    • SHA256

      8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

    • SHA512

      814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

    • SSDEEP

      192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo

    Score
    3/10
    • Target

      SPACE.exe

    • Size

      64KB

    • MD5

      7e34d7132af69d2b537068cfeeddf3e5

    • SHA1

      4c583992191940a4543a2e0326331912ea8ec0c6

    • SHA256

      b4ca28c435110aacd19d291e3760e921b5a6bbac8a30b39434aeb33ab9e58efb

    • SHA512

      38c1a811010d390d7ef4a6db3f0ae55710ae5f4755142930384ebae88d8848692a44dad65b332c397178efc33795528ef3cf67a67b59da361898805b62ef69f4

    • SSDEEP

      1536:P2anEFJabKsq6+FVc13BDr2LcUjbrA9kEi:P2MEFyreOxHIjbrHEi

    Score
    1/10
    • Target

      SPACE.ocx

    • Size

      56KB

    • MD5

      98b581b45406f280ebb2e5188c656f05

    • SHA1

      19107a199a26ba61097632896ca9ae26934f5330

    • SHA256

      db6f06519987d8e74ef509eab5c31abc00a6d9b81d8ab30a9f99cf7f61fca4bc

    • SHA512

      459ae40ecb693b801f8766441af1bb556ff07967169af98be01403bbb5bcd5663c6e473e41bb405b3c40d03da4c54f67f2bafaa720f087eb9bf3c4710c79f9c4

    • SSDEEP

      768:GdXXsq9IV78XQAAC6eygSFVC242jb7tdoHVWV0VWVTDvxitHdYXXs:GdXXsyXeeoS23bRihdYXXs

    Score
    1/10
    • Target

      uninst.exe

    • Size

      69KB

    • MD5

      8ddeb34848577f9853bedbec4924e114

    • SHA1

      c31e26ed9956a47ad081213ead5c22967ad5ce2a

    • SHA256

      3499f8698c2e87c723b27ee94c8488c2e0d204409223d4a58b660c29cb596bd5

    • SHA512

      b3d8e8a7ef7e90e4c81fb3f2d445eeae16e8aae0868161fd7b0a73afcaed2f6cdcd389584f7014e05d06dcb20119e3b5f683a4e22bc3c590d24c1b1b15744340

    • SSDEEP

      1536:QyZMSZFvknTePMZd4k4kJJkYRN6QcIAqbu31zQ1x:fZMJnTeM4cJJkqvu3tQT

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks