Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

4bf4916a9b...18.exe

windows7-x64

7

4bf4916a9b...18.exe

windows10-2004-x64

7

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows7-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

OfferBoxSetupES.exe

windows7-x64

7

OfferBoxSetupES.exe

windows10-2004-x64

7

OfferBoxSetupFR.exe

windows7-x64

7

OfferBoxSetupFR.exe

windows10-2004-x64

7

OfferBoxSetupIT.exe

windows7-x64

7

OfferBoxSetupIT.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4bf4916a9b123717b37767e3ac1fbbfe_JaffaCakes118

  • Size

    322KB

  • Sample

    240715-3x4rmayanc

  • MD5

    4bf4916a9b123717b37767e3ac1fbbfe

  • SHA1

    237d505a6dcad67e72a94c91c0ec384ef1de4b44

  • SHA256

    2dd1ae3801a656dfd8e5c8966b15ae8e752713c819b4edaabb6d707a26b0117c

  • SHA512

    ad574bb7765064ea3ec86e5af8b3b90e8bcc5f46959d59775265ddd3aff8f8bdf4908e18853a2a4709b84ea8a708d7ede609cc77d4b49b7c3f46a086aa24e9bc

  • SSDEEP

    6144:RsBhi0HBMzhOoojMtePx9BFDD8fRhXLxmqV9lbxXGUfYCYvAYBOM:qapjtezBx4h7cIlRwC7YsM

Score
7/10

Malware Config

Targets

    • Target

      4bf4916a9b123717b37767e3ac1fbbfe_JaffaCakes118

    • Size

      322KB

    • MD5

      4bf4916a9b123717b37767e3ac1fbbfe

    • SHA1

      237d505a6dcad67e72a94c91c0ec384ef1de4b44

    • SHA256

      2dd1ae3801a656dfd8e5c8966b15ae8e752713c819b4edaabb6d707a26b0117c

    • SHA512

      ad574bb7765064ea3ec86e5af8b3b90e8bcc5f46959d59775265ddd3aff8f8bdf4908e18853a2a4709b84ea8a708d7ede609cc77d4b49b7c3f46a086aa24e9bc

    • SSDEEP

      6144:RsBhi0HBMzhOoojMtePx9BFDD8fRhXLxmqV9lbxXGUfYCYvAYBOM:qapjtezBx4h7cIlRwC7YsM

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      a5f8399a743ab7f9c88c645c35b1ebb5

    • SHA1

      168f3c158913b0367bf79fa413357fbe97018191

    • SHA256

      dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9

    • SHA512

      824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977

    • SSDEEP

      192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/UAC.dll

    • Size

      13KB

    • MD5

      7b71d29b9a40808b733b111cffa2185c

    • SHA1

      5d113f9fd0049711b0cdbc116ab098b9050b88de

    • SHA256

      36503fdeb35259158c3ab2fc0e18685943803e9ead4fc64a842ee09dc855713f

    • SHA512

      1b49de3975d066b9447d274b7e3d449b9fcba60e6f4033d6ca9a38ff77f8f2c08ce6a780795db48fbb1da659b10c0bb3da717986113afb61765ffe06cfdb3599

    • SSDEEP

      192:ev/MEBJZTJ6xr+9mXnEsj3LvQI4e9lUwviLSxUVWYyLDGZwAjF9UHwg:kMICQmXvQIt//v+VWYyLyOYF9

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      20KB

    • MD5

      134b93f8bd1f82cd2f1b06c878580703

    • SHA1

      29cdbce7a2caf1f7e4d2a139c42336d490074665

    • SHA256

      45153adf50541316468e2b189a0f8127be9fb29e2f920e7eeaa6aceb438db8c4

    • SHA512

      f970c38debb6631dab7369e2bc96237f16a8fd328d9d35a2b54cb688e1807f62cc6d63230afe89ce5c3945097ae4466872c72929a9623adde3ee57bddf54b692

    • SSDEEP

      384:EBQCxl9oGPZsw1v6yBIgktbBYeTeXMK5HQ/0lR+Tya4LV0Ac9khYLMkIX0+GBxgU:goGFghBZTeXMK6cVa4L

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      c10e04dd4ad4277d5adc951bb331c777

    • SHA1

      b1e30808198a3ae6d6d1cca62df8893dc2a7ad43

    • SHA256

      e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a

    • SHA512

      853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e

    • SSDEEP

      96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420

    Score
    3/10
    behavioral11behavioral12

    • Target

      OfferBoxSetupES.exe

    • Size

      173KB

    • MD5

      0c790a0faa24e7e4396b01e6b067939a

    • SHA1

      da13d5fed90cd1d9cbe3c21f80205135ef5ebd1b

    • SHA256

      db1997cf8cb4ea783c54b4524dbe792d0f317e2e578d10d87a5d4cb888d44ac5

    • SHA512

      97c8499aca1a9d145675cb91c675c4dbe48859392c0541a5865596088284b3eb6d34265fe7719cb9d0f610fad978d1ae58242ce019e2dde4c81ef2583b2b5bba

    • SSDEEP

      3072:Ubr1YUfD6mJLqlHM9DgMyHmaaulyWhZ4i+yYOrCX1CtcgtUoZ0MwZDXIEtbL:UuPlHMiy4D+FWCX1y/Z0DHtbL

    Score
    7/10

    • Loads dropped DLL

    behavioral13behavioral14

    • Target

      OfferBoxSetupFR.exe

    • Size

      173KB

    • MD5

      b0a5977207bb4d9d9b0c794a401ab102

    • SHA1

      56089f217c388f125c5e1ee13b1513eff2e4410d

    • SHA256

      869ee9c9ae26e1b61b2a076007f0913419be7ca99a97e3edacc4d8cce37ad2ef

    • SHA512

      4863ba7de70eb62c691b2803bf70d406455eb94495189ac58d9d2cb39c03d2154f1f3c2e38dc9133927130705b7bc09e88e7d666c7f97a9980bb6004bc40b5a3

    • SSDEEP

      3072:Ubr1YUfD6mJLqlHM9DgMyHmaaulyWhZ4i+yYOrCX1CtcgtUoZ0MwZDXIEtbi:UuPlHMiy4D+FWCX1y/Z0DHtbi

    Score
    7/10

    • Loads dropped DLL

    behavioral15behavioral16

    • Target

      OfferBoxSetupIT.exe

    • Size

      173KB

    • MD5

      59d5ef582a3b3762a74c2c891bc270ed

    • SHA1

      6991f525215d3701ab8ff644bc00c1dce1ced991

    • SHA256

      44f69592e97ff286bb3b4d65727cd458aec6753db56590456efba70e147b1b88

    • SHA512

      52fade716741698cc505bf06d9878a43822ac6da7390e52119b45e0cb647a16f60a27d1b1437e390b4501d514bc4e1cf619c34209ee1d8125110de2cdf146f5a

    • SSDEEP

      3072:Ubr1YUfD6mJLqlHM9DgMyHmaaulyWhZ4i+yYOrCX1CtcgtUoZ0MwZDXIEtbU:UuPlHMiy4D+FWCX1y/Z0DHtbU

    Score
    7/10

    • Loads dropped DLL

    behavioral17behavioral18

MITRE ATT&CK Enterprise v15

Tasks