Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6f22986e9ca919f7b5dc88ce615d569a_JaffaCakes118

  • Size

    683KB

  • Sample

    240725-l4vzmasdrr

  • MD5

    6f22986e9ca919f7b5dc88ce615d569a

  • SHA1

    005e01e1b3b5477ebdc6ea93775db641db8c4e31

  • SHA256

    cfbcc7e3b52c082b18636e3eab57bbfe1d9a4b4a1d5d9f7879d75bae71c3ab4c

  • SHA512

    764cd0ab1f2af1b4418e49c093fe4d5919cebaf0d4af2d6b78aa10ac7e3fc13b2efd6a43f6e944ceb803d62a8b40140c60830c6fc84170c91adc87f6a51eeee3

  • SSDEEP

    12288:/MNnJooazKv1gsxkKzDUQOfJ8Xf0t+BDzHhIMWt32O3BRTrySQk6fXu2IB:Gn+7l8kJQSG3DzBTohy1u2IB

Score
7/10

Malware Config

Targets

    • Target

      ESET_VC52_RegTool/ESET_VC52_RegTool.exe

    • Size

      702KB

    • MD5

      567016bf06bf31d689674191b8a1d292

    • SHA1

      c03ef3bc64815548a1feecba24027988b51e0599

    • SHA256

      d0290943fdfc360695999fa40450c4c080a74405f0f4c6f8e6f3ce38f8726556

    • SHA512

      199ad9d76b389a55d1c05345e149251a4acfec4b10a74bb193f7820e6b5f270101d856f0e017042066559a2a173f149d0fa75fa12d840ce2c290680f5098385d

    • SSDEEP

      12288:XM9oMg03jAeThJgf033TCzwYBh2Y5b8p0eYV25HU+u/KNvzP8PL9M3U/NdyptWaQ:XM9oMg0znkW2zwYB4Yg0PQ53nP8PjLya

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      $PLUGINSDIR/Banner.dll

    • Size

      4KB

    • MD5

      91c9ee5005ac6cb4ec79a3b039b4c8df

    • SHA1

      95a9c018b501b6697beca846a33955909c3f97be

    • SHA256

      05838c8f81efbb98679010158f29cefd88a34fb1fe5d603e839dd406235ddf29

    • SHA512

      41cc45a64fbe64cd83e704e87193004245f5d29f4f880921d041e5f2ceec86ca0653146e6477642eba73875b9d5f0d773b540436b19e4797def9c15d7618474b

    Score
    3/10
    • Target

      ESET_VC52_RegTool.exe

    • Size

      320KB

    • MD5

      8511f104795db9684070c37f75b6cbcc

    • SHA1

      513a87da3a27d51d65670f12776e9afb28958151

    • SHA256

      869830bc824202f554fb00c566c0b42b1260cd4a0551c7294d99d3b2178f4f4d

    • SHA512

      25cf6a3d13a61f609cc108b5ded271b1670ceb870cd06940d6eb1c379d73f0341194f88c307e41b0d09776ae8f21257d159fc085082a3f971b5bd93cbd6bcfc9

    • SSDEEP

      6144:6RMhKavxHzcyzbNVZPV1HyM+8dPMBYruy13X9WinFaXg8BBr+Be:6RgKavhzcyfNxptPj913XjMTBe

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      VC52_ESET_IDInfo.exe

    • Size

      369KB

    • MD5

      c3a37410978d749cf67c9eac82781bee

    • SHA1

      d89d387f2076d64318cf55d7293e3b1e8bd700f2

    • SHA256

      585c2a9f8e6db84bd41fc6e52109caeb7b7b06a02ffc29f77e9822d4a1a5eb75

    • SHA512

      3f2d3acc9113816b4eb52e307a6d3b200622bb8f7b9aedea310f39d026f751ffe9a2a1df126518ce189c9a86f2f53bfa6a52a95892a68615788846861fd7b34f

    • SSDEEP

      6144:rjn325g9LcO04S629EzDTZvxVK9tQo1QhE62pJlaG1k:rj3229A5629EzXZvx89tQK+RSa/

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

MITRE ATT&CK Enterprise v15

Tasks