Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

5e21356a7f...18.exe

windows7-x64

7

5e21356a7f...18.exe

windows10-2004-x64

7

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

HackerPro.exe

windows7-x64

3

HackerPro.exe

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5e21356a7f2de573195153faa955ec65_JaffaCakes118

  • Size

    1.4MB

  • Sample

    240719-3fpw5swamq

  • MD5

    5e21356a7f2de573195153faa955ec65

  • SHA1

    a35a4bb8af99995e28179f32887528a4e899a3ba

  • SHA256

    f8821056b53db9e6f7f1cca9f902ba086e1a27c4417d5ec4f56436d8f8d34587

  • SHA512

    2fde2ec74cbe62a38853cf5a2500bb74da0fc66fe28b9a5e38bf36324015805732c3b407ce2d2978432b91ef08f7edd635c39a30699d810826230fe3b408c25b

  • SSDEEP

    24576:XHtJf+pvrZrTNJBHqA0qMccGnRssXodPGYDXG8e6d2hwF9qTvndOum:XNJf+pvtrTzgA0unesXdYDWn6dNPC0h

Score
7/10

Malware Config

Targets

    • Target

      5e21356a7f2de573195153faa955ec65_JaffaCakes118

    • Size

      1.4MB

    • MD5

      5e21356a7f2de573195153faa955ec65

    • SHA1

      a35a4bb8af99995e28179f32887528a4e899a3ba

    • SHA256

      f8821056b53db9e6f7f1cca9f902ba086e1a27c4417d5ec4f56436d8f8d34587

    • SHA512

      2fde2ec74cbe62a38853cf5a2500bb74da0fc66fe28b9a5e38bf36324015805732c3b407ce2d2978432b91ef08f7edd635c39a30699d810826230fe3b408c25b

    • SSDEEP

      24576:XHtJf+pvrZrTNJBHqA0qMccGnRssXodPGYDXG8e6d2hwF9qTvndOum:XNJf+pvtrTzgA0unesXdYDWn6dNPC0h

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/StartMenu.dll

    • Size

      7KB

    • MD5

      a4173b381625f9f12aadb4e1cdaefdb8

    • SHA1

      cf1680c2bc970d5675adbf5e89292a97e6724713

    • SHA256

      7755ff2707ca19344d489a5acec02d9e310425fa6e100d2f13025761676b875b

    • SHA512

      fcac79d42862da6bdd3ecad9d887a975cdff2301a8322f321be58f754a26b27077b452faa4751bbd09cd3371b4afce65255fbbb443e2c93dd2cba0ba652f4a82

    • SSDEEP

      96:2fiqP7bO2qHkAC40KhvSE+6nrxtMn0iGd88qRLqtJ1tbRhElfRx2:siqP7OHX1Q4xtcf8qo/ttgfRx2

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      c10e04dd4ad4277d5adc951bb331c777

    • SHA1

      b1e30808198a3ae6d6d1cca62df8893dc2a7ad43

    • SHA256

      e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a

    • SHA512

      853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e

    • SSDEEP

      96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420

    Score
    3/10
    behavioral7behavioral8

    • Target

      HackerPro.exe

    • Size

      1.3MB

    • MD5

      c0c31cecbf408c1f95c972b7e041e9c5

    • SHA1

      62fb115f1470145a3b07017c9495235e510adcb7

    • SHA256

      fb4930956c0423ce2992a3db3b7e1c867e0203536a42ee6c486c3b8090394406

    • SHA512

      01c70011316d871e7f5d658a77b563fb10febd51180303901f4e9cddd91f0275aedf52f98a456d89491cd61b6530d3ca2e9a495cda5c3dc18371c2d0d89f51a0

    • SSDEEP

      24576:EMIz3bs5tT4hI9gY5vmIbWSauqXxcv37CsxdwlYUXLytK/cRgOnmq9g6wLe2:EZ3pA0/SeXxcP75QlYUXLy2cOU7m6w

    Score
    3/10
    behavioral10behavioral9

    • Target

      Uninstall.exe

    • Size

      99KB

    • MD5

      07695a6be08df43a936644bdda980fb8

    • SHA1

      21ac843bbfbea6f793ecc972878a2a3dcdf3eadb

    • SHA256

      6e715a31a5791e1be88244d645bc2233c379f0fcc606ab21f4800b4c982e66b6

    • SHA512

      8633a94b413abfdccd268837c68e24a2e7497ef0809b08428df487bf7b1fb3e3d54b85a53b3f47f1ca144968723a21cf6f7596c36604f285f21c65f3ae4c4491

    • SSDEEP

      1536:aQpQ5EP0ijnRTXJOgm7yiqCueo94QoJLD7AcL1Sjl+fS2MVI:aQIURTXJOVA5eSopD7AifS2d

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral11behavioral12

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      c10e04dd4ad4277d5adc951bb331c777

    • SHA1

      b1e30808198a3ae6d6d1cca62df8893dc2a7ad43

    • SHA256

      e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a

    • SHA512

      853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e

    • SSDEEP

      96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420

    Score
    3/10
    behavioral15behavioral16

MITRE ATT&CK Enterprise v15

Tasks