Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

5d86f8a185...18.exe

windows7-x64

7

5d86f8a185...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/eula.html

windows7-x64

1

$PLUGINSDIR/eula.html

windows10-2004-x64

1

$PLUGINSDI...nt.exe

windows7-x64

1

$PLUGINSDI...nt.exe

windows10-2004-x64

1

$PLUGINSDI...er.dll

windows7-x64

1

$PLUGINSDI...er.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/07/2024, 20:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5d86f8a18557ca2d4a34424aeec698b6_JaffaCakes118.exe

  • Size

    220KB

  • MD5

    5d86f8a18557ca2d4a34424aeec698b6

  • SHA1

    f1610f80f288515cccf3c7e0ce6fdee29353c69f

  • SHA256

    bc611b06c52dfdadb32a632388e7ea1122eabdbb4da5712c48c877712e48bcbb

  • SHA512

    8ca768215db46879d58b796998485015afbfb631217a4370674b8b9948d1603d031431152844e1ce4c08790de80d94de729ec6a320bbe814d4b5d3b2ad5544b3

  • SSDEEP

    3072:1cmVWD5ltbmP3Q7yAhrzpVOUzHeLLGd+/p18aeJrvMTNUauqzCe2QngbTtgeVPne:KmJIDhrFMUz1d+QtvMTNsqee2mW+

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 5 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\5d86f8a18557ca2d4a34424aeec698b6_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\5d86f8a18557ca2d4a34424aeec698b6_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    PID:2816

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nscCB70.tmp\InstallOptions.dll
    Filesize

    15KB

    MD5

    6e663f1a0de94bc05d64d020da5d6f36

    SHA1

    c5abb0033776d6ab1f07e5b3568f7d64f90e5b04

    SHA256

    458b70e1745dc6e768d2338ccf3e6e86436488954ca3763472d8ffec4e7177e4

    SHA512

    2a037c39f3a08d4a80494227990f36c4fef2f73c4a6ad74dcc334317a1372234c25d08d8b80d79e126881a49fa4b3f2fffe3604c959d9ceceb47acc7192cc6a5

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nscCB70.tmp\System.dll
    Filesize

    11KB

    MD5

    b9f430f71c7144d8ff4ab94be2785aa6

    SHA1

    c5c1e153caff7ad1d221a9acc8bbb831f05ccb05

    SHA256

    b496e81a74ce871236abcd096fb9a6b210b456bebaa7464fa844b3241e51a655

    SHA512

    c7ce431b6a1493fd7d1fe1b1c823ad22b582c43c8eb2fb6a471c648dd9df9953277c89932c66afd598d43ea36f4a8602e84cd175115266943071cbc8ce204099

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nscCB70.tmp\eula.ini
    Filesize

    1KB

    MD5

    e1310ccbd4b5fe1422336553774b27c6

    SHA1

    47fd7b58429cc907d7386c1e51e378cab0ffe33b

    SHA256

    748d005d1d74a87f756e2baa694d8c38321c0e2aaaabab41214a2033c8c99a49

    SHA512

    d3abb838989beed390db4e88a3e9a6ec50f1df8d12e5d4c98a15ef4d2a6dfc7ef8f4418ac6242d52e37df414bee62f85825910310dcdd9dbaca7778b65671949

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nscCB70.tmp\installhelper.dll
    Filesize

    296KB

    MD5

    599f9db17bc1bb21ae7d621ba18c7b0b

    SHA1

    517982eded11fca77b619e6440f1a02e510b215e

    SHA256

    02e43c366ddd5e2e6237292b232b09c0df993a88406079c202b3d865c472da4a

    SHA512

    4451539b1fec010921338c170c2fc0197ce5ff019b87f1eba3ae6e779263ad210ff911d1a5108051c3010a53f0a29a3816c6fb3abe4ae19407e6c4ca008fba7c

    Download Submit