Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

Ability.msi

windows7-x64

6

Ability.msi

windows10-2004-x64

6

ABMCmn.dll

windows7-x64

3

ABMCmn.dll

windows10-2004-x64

3

ABViewForms.dll

windows7-x64

3

ABViewForms.dll

windows10-2004-x64

3

FormCtls.dll

windows7-x64

3

FormCtls.dll

windows10-2004-x64

3

FormEdit.exe

windows7-x64

1

FormEdit.exe

windows10-2004-x64

3

Install.exe

windows7-x64

7

Install.exe

windows10-2004-x64

7

a4w195.dll

windows7-x64

3

a4w195.dll

windows10-2004-x64

3

acfpdf.dll

windows7-x64

3

acfpdf.dll

windows10-2004-x64

3

acfpdfu.dll

windows7-x64

3

acfpdfu.dll

windows10-2004-x64

3

acfpdfui.dll

windows7-x64

3

acfpdfui.dll

windows10-2004-x64

3

acpdfcrdb.dll

windows7-x64

3

acpdfcrdb.dll

windows10-2004-x64

3

acpdfcrext.dll

windows7-x64

3

acpdfcrext.dll

windows10-2004-x64

3

cdintf.dll

windows7-x64

3

cdintf.dll

windows10-2004-x64

3

ABAnimFX.dll

windows7-x64

3

ABAnimFX.dll

windows10-2004-x64

3

ABHook.dll

windows7-x64

3

ABHook.dll

windows10-2004-x64

3

ABImageX.dll

windows7-x64

3

ABImageX.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    81cdc371559037db6b9d2f5dc6a25fbd_JaffaCakes118

  • Size

    22.5MB

  • Sample

    240801-1en74sxapm

  • MD5

    81cdc371559037db6b9d2f5dc6a25fbd

  • SHA1

    854daa64e08e8cc1d8f93c19354bb27cb4d9e99b

  • SHA256

    5e2b7ee91606a8a2327f731f4d863c505daa70a9eb10ca0700529f6aa4fd61a8

  • SHA512

    7d5fb110521334f8c7d0f49e909dd01e094366af1b05b4fc5cf10d1e23a1e422572f7315c9b2e7437f06d05d7226c40dc9c90f22eb350e593fd88656293d77a1

  • SSDEEP

    393216:Bwr9p3Vy8CJQIAJfezq7+lmcIwLxNY41yMt4D+eC33XBSIMJctKrvIFwni:BI9tVy+IdqXc9dN71Lg+eCnXBSIM6tgg

Score
7/10
discoverypersistenceprivilege_escalation

Malware Config

Targets

    • Target

      Ability.MSI

    • Size

      1.1MB

    • MD5

      e58820ed8d5250b99608423ab08d92aa

    • SHA1

      f4fe5454e61f3477d87c9b7c3bcc5d311c1a4a41

    • SHA256

      4d355fbb17711132a4c8cfa28c52e5defa8b5b98b1f654e9ff1e429c05a4dc6b

    • SHA512

      fb40a210561c60b07ffeb96eeac4f429253488b11776dda611bacad0432948f77d0082a06c20c2cf5822e4ab811f8b134ffa0b9699d42d660d3c0f114353a776

    • SSDEEP

      12288:NEEXd2VZ1WcpyO5GvElQ07nJUQKiJKEEH5WqU4JjVcI:5IPHpyO5GvElzLM53zVcI

    Score
    6/10
    discoverypersistenceprivilege_escalation

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

    • Target

      ABMCmn.dll

    • Size

      320KB

    • MD5

      d6ae663ab1905da3ae3f9df19e7d5e07

    • SHA1

      b80d7c908bdc74e4a9fb1f7cff388162e98d1e7d

    • SHA256

      e035956ae8a227b291a36e37b2369d0f2dfc786d9f6697459244ab5e38a7591d

    • SHA512

      f499a5f4ee89eb4d7f82eb17f00c9f913ed2547164da9af7c2235499704a5606b9c440add4fa357557098378df6d5a0b6ba75f9d0022a9b66e6892f4f0231339

    • SSDEEP

      6144:Dsh9MLuXTiZN0N/Qs71bU9b9pNtxn5+X8mJY:2TjVIprx5

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      ABViewForms.dll

    • Size

      88KB

    • MD5

      1b75ecb08e3b941b4b9a6d6d4d8a12a3

    • SHA1

      545c35a6441ad89b56e01c7ccbfabb59ea4fc331

    • SHA256

      7ac32b9d71fd7094ea1b1dd861a521c6f965d5ba07a10b541e2d76eb578d9b16

    • SHA512

      4c324b36b8f1215267a1c1ff1da9c2a7c3de9caa504c5d6ec371631bc09e400a0b2cf1ab921e3c0d05976c1dc44580e3f1642d1f965c21636bf22a9cf1901f51

    • SSDEEP

      1536:qvYPfE4E9hOE7EVLp2IOcAYddK1doN6NGlNZ0:qQPfE4bcKLr30joN1lNu

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      FormCtls.ocx

    • Size

      136KB

    • MD5

      42138591b7a0b7e67ae9ee20cbcff41e

    • SHA1

      9ee9e99676801d62068750bdffaadfe580661d22

    • SHA256

      de51f9fbc4613220c43af0a5d963b80d9543da2359c8d16a3b0744f7f196e3cc

    • SHA512

      46aff40e95b43ebe372635f0f9a35798cd7d008a928dcda80a518658c98e2a602a62e8de42276d3e387deeca9a489dca763ecd51e237693023a7f32b22a55695

    • SSDEEP

      3072:JzbQjKVFeKVIY/3IZMb06uLXYsgxhC3n:RbwqLb0us

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      FormEdit.exe

    • Size

      280KB

    • MD5

      628ad10b68af589899c96d357e7be6e5

    • SHA1

      51403cacbe0690ac468b5497c664a22ee7dad3f7

    • SHA256

      a4641fd56233acf98c0d731a9af379eaf2cbcd2f132e569477a897b792c5ba49

    • SHA512

      67fac11903917440e602db0cf61e4550a25401eb676c79bbeb323d659dd04be72c499ae41dcff137d6e4355b0d70bb01e66d4a9308f6fd11edac4825c22d5518

    • SSDEEP

      3072:QSHPsAoQu0bTz04ECw3nZST3TFOHhXmMKQ5zVKXlrX6sGZZwCTnET3pzAEDa+KzG:lloQTTHT85+pZOTnG+K1iHtHzO64

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      Install.exe

    • Size

      116KB

    • MD5

      f487bfd5c24ff804331e83be0bf4f6f7

    • SHA1

      8d68a0ee4ec13d61a983444b2e608e41097079f2

    • SHA256

      f7570fa917828242bc49cc74f49f24974e5877dfbc8c17652771e333ae839349

    • SHA512

      18fd94acdcbdcfc97183e8f4c5c0e3af27da78f19edbceed9305f5b87304923d009a414d8d7aba4ad0db7e23142b5c46f11a578b8002ace8dc94e38d4e27f3ec

    • SSDEEP

      3072:Wx4GxucJcqKhU+9cCi50C+imV5ooLQR6o0:HpO+9D6+iBIo0

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral11behavioral12

    • Target

      a4w195.dll

    • Size

      840KB

    • MD5

      751cd83ecc997a739cf1c986fe42b42c

    • SHA1

      d872ec8b339ae56545432e8367d093726f4226ec

    • SHA256

      1d768fd8d9df0c44ef3e6e808e5210effe652645fe6c9a887a0e9e196a349183

    • SHA512

      c73f03b1231e6166b433c5e6755f846e1c8ffa4af4c89866ae099060a8ecaef6e454eb4e79691bf1c616dd7a868036ad51914465b3b459e78ed7416afa2cf0c3

    • SSDEEP

      12288:OXSj/Dx8oBqg4EZAd21eGAB7sWWLe35MhBzSz3JPoPytoNgI8l:OXQ/1mECkeGAB7tyY3JYytoNgI8l

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      acfpdf.dll

    • Size

      236KB

    • MD5

      a5c57933334d0e691a047f7c47b9ee04

    • SHA1

      4d3499cb66cb3e24322d198ddba702a2cc8e8d7f

    • SHA256

      f1968a64e536a5f08baca578863d79477bc178e6bc2d461c9ef28df3c987cd8b

    • SHA512

      b2bbb2bd460a289e83e8d53034997b01c8170dc4793f4f02b261dc029a3b254525611d3a6b507b94212784824270f5a69976944199eeb095866f1600e472eb40

    • SSDEEP

      3072:jE4vKHDkuRLqOFYkRX/Dq70u5LFnIoA4EGOfi6uJL0cV/MiAbEZTYY8IO0SM:jn0QWLldp2BZ0GO/uVXVMlbGYY8X0SM

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      acfpdfu.dll

    • Size

      159KB

    • MD5

      1f1f128c987308c6b13b7bfc9e7a33ab

    • SHA1

      9ea7bcc65cbe892b8e50deef4457156bc51024d4

    • SHA256

      a23f15f33e37c3ec4bd000dcfd7e5ceb32618dde459652063f567e55cf1b979a

    • SHA512

      77cca8d4350860614334db24908d8a80025e952502f30585ba31786f0ae9340d1948460f2d0bfbdb4db6f65d7cb16ab141c76e42724313aa82c84dfe17372440

    • SSDEEP

      3072:XqhG4vnPs+lTyUnrvjax2526L0uGwSiRrswNTZWFd5BMkC:XERnPrl2xQLAyfNT4BFC

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      acfpdfui.dll

    • Size

      187KB

    • MD5

      b40e67b3f61a2fba38745b1d20ba3f1d

    • SHA1

      ae6fff83ae6b53381e0e96aa730bf6fc7706ce8c

    • SHA256

      dc0de9ba9d5ec5ec94dd207cd7ecd4bc39d8acdd4c35fef64448319965fc1796

    • SHA512

      1c2c11dbc4f10be82587a4f697f943ad8e806294ab6a87a5e0881b2f45548096f4793e639319798ba8d7cfd094e06a3c2c85705fcbfa9804a2aaf1b817f29549

    • SSDEEP

      3072:J0Eeavb+Waq8wkExKaZoxSRx6zvJlbpRHO17Mh18X3hKHhwgWWzywptUMcG:JB8wkEx7WxSreLdRnzn0ZG

    Score
    3/10
    discovery
    behavioral19behavioral20

    • Target

      acpdfcrdb.dll

    • Size

      232KB

    • MD5

      ea43d961edc402597368a89bc7ce9c4c

    • SHA1

      d25a8028e8a4a398f6daec04ddea90e0fb27fb17

    • SHA256

      14b3ce6f455b7cfe9aca5d5cc49cfaff19f04049d2a1867f1e0b8d048885b4ca

    • SHA512

      41b42b1990f6bc2472112f69ac8b4f61266ce253ccb45895b43362f153c18eef5fabe0738749c9efd9ef847871b7188973f4510f1ab93c4a6463faf2b405ede1

    • SSDEEP

      3072:fxTmR+uWzw8Djj9RfbzWa1vRpunZqqSgIcdo2dBGDzzD2y7:eWE8DjJZ/WaFRmCcHW7p7

    Score
    3/10
    discovery
    behavioral21behavioral22

    • Target

      acpdfcrext.dll

    • Size

      268KB

    • MD5

      3b9a6a82bbb4846897588a822e5ceb75

    • SHA1

      d7ecec9745504e86837b226dde7b5fda5d88e3dc

    • SHA256

      9dfdf570ad994331c1a83688e7ebc5a54c22892a553dd80e9425bb421f50860d

    • SHA512

      45a0d859b8722326dfb9d98d3ce10846dae83a75b2f87638d5455d9bd902b04fe9dccdeaa68ee3d5f088834f30b48c3cff7ea0997568033c45402c610d92970e

    • SSDEEP

      6144:gUXDmOsOpiu4IM9oMrcKCKYeNWKJg0nTxebQpVH:gUTmxOpiu4YCCKTvXLp

    Score
    3/10
    discovery
    behavioral23behavioral24

    • Target

      cdintf.dll

    • Size

      1.0MB

    • MD5

      d537827b24dffe10bc17c9dffe465338

    • SHA1

      20f98e0934aff2fb851052b9c32745b1f9b6d288

    • SHA256

      fd0353032a8b86dd113750b0c7be5f599d5e97a38b937b205ac279c5014c65ae

    • SHA512

      32560626c47049a5b94ee474100de707d4213a6957e1b822dca3d822f62ed715dc74264f363671a99e82380b5d6c901c7b3b935a7df350a36a0a9059993d8d83

    • SSDEEP

      12288:xx76tpb+fIH0EJKLAT3BAKukkPix+sbP1pw07hXphBEY4iYVUDQoQ2PkNNhXFo9v:x54+f8KUjCKufiz7h5hKlCay8K5cTrC

    Score
    3/10
    discovery
    behavioral25behavioral26

    • Target

      ABAnimFX.dll

    • Size

      56KB

    • MD5

      76314437551556b5af2433b1fba1fda9

    • SHA1

      92716c6b7bb9fd9a51b8da2269fbab80a34e21c3

    • SHA256

      cae3b6c014426fd049370ce8a602f28a9a40fb2fb5085f62e3d8118d01dbb934

    • SHA512

      0932ce1a664ceee9c9edeeaf08adae81211774ce374ab993c5a3ac8ba0a127178dd0426cf3b355b054c0b15d0423238d876c265db32edf42da6e61d07f4ca7f3

    • SSDEEP

      1536:pDRk4ldH8bvkk9rmlO4ikcLf8V88c4pxso:Tk4HH8zoO4ikW8u8ckso

    Score
    3/10
    discovery
    behavioral27behavioral28

    • Target

      ABHook.dll

    • Size

      44KB

    • MD5

      fa5a1eea28f4c825f65e4525b687e66e

    • SHA1

      87e8a1d4a234bca34c4252895d4d6828f2a59115

    • SHA256

      e90caec0b9134f0ba2549e095d02f364e926614bdf43f744dffd58cb691a450b

    • SHA512

      2ae999090ba157b95fde0ce09185874936e6b90df68e4e7f47557cb63b47d70d8643b695592c2bdc9692eb382f286da1f3d2ce6540ce02f4cbcfbe0ae94cc980

    • SSDEEP

      384:xfArbClT57iu5tClq7HhRar77uc8/l3DyWfhSYbdj0uV+cA/8oIQ/dlj:yCTBiuH9hgrWRDFpS4dj0Z/8op

    Score
    3/10
    discovery
    behavioral29behavioral30

    • Target

      ABImageX.dll

    • Size

      132KB

    • MD5

      5167966ac850d6d8dbf33bb77d8ab090

    • SHA1

      9e4c0e21a7a73fce89e945926b69a72de11056a3

    • SHA256

      72ddb644087b206cdf75e9ffe271dc6f4ec8f04ab083c32981c7f0d3b0bdae55

    • SHA512

      3bdb1c4250aad06dc1d9e796d01574dc7be963fa21ce08f5df0b0b311f658267e0f1a6f6063354e2253fa40ae52ab82f1613a59c7c973fd63f44a02e46887404

    • SSDEEP

      3072:n26W+tal/sU2JjsFXbDiC2PtUcCI6w9WNRycG06LNB:v+osF3iC2PtUcCI6w9WNRy73

    Score
    3/10
    discovery
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

discoverypersistenceprivilege_escalation
Score
6/10

behavioral2

discoverypersistenceprivilege_escalation
Score
6/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

Score
1/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
7/10

behavioral12

discovery
Score
7/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10