Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

a067bacad5...18.exe

windows7-x64

7

a067bacad5...18.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$TEMP/licdata.rtf

windows7-x64

4

$TEMP/licdata.rtf

windows10-2004-x64

1

$TEMP/rkverify.exe

windows7-x64

7

$TEMP/rkverify.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a067bacad57182cbbc45f2fc7263790c_JaffaCakes118

  • Size

    328KB

  • Sample

    240816-3n584avbmg

  • MD5

    a067bacad57182cbbc45f2fc7263790c

  • SHA1

    f648add61310f6d1c7fd2ca7a0b1e7304ea82891

  • SHA256

    1d1250b78aafcd3f5c0e9784c164e5deb8a67e68604dc502803f7656d4b68f00

  • SHA512

    8732b2dc80df148306bc82d6b03b3cd784b9ad4e7c7a310d371745e45a637f9904f5897de61df0a92387d7ca8ce99cd13e057a650919158f5099943e407629be

  • SSDEEP

    6144:ze34tInplRit+5ksQXzGWNk/r3bNb8vYsXaV4/CqfYIlQJNtG:rIplRmKit6jLZsKu/qImi

Score
7/10
discovery

Malware Config

Targets

    • Target

      a067bacad57182cbbc45f2fc7263790c_JaffaCakes118

    • Size

      328KB

    • MD5

      a067bacad57182cbbc45f2fc7263790c

    • SHA1

      f648add61310f6d1c7fd2ca7a0b1e7304ea82891

    • SHA256

      1d1250b78aafcd3f5c0e9784c164e5deb8a67e68604dc502803f7656d4b68f00

    • SHA512

      8732b2dc80df148306bc82d6b03b3cd784b9ad4e7c7a310d371745e45a637f9904f5897de61df0a92387d7ca8ce99cd13e057a650919158f5099943e407629be

    • SSDEEP

      6144:ze34tInplRit+5ksQXzGWNk/r3bNb8vYsXaV4/CqfYIlQJNtG:rIplRmKit6jLZsKu/qImi

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      20KB

    • MD5

      7569b23f19a0f5cb4c1d3b30a296c4bb

    • SHA1

      c5f3546b3c795e46445393960694a2341692ddc7

    • SHA256

      615bf32e15aaa8d58832df2298f75dd2b29ea5f25bf152c99630315cb618a31a

    • SHA512

      11663bf180f9540ad247957b6793f8afd1b4e66f3b692b4ad05735f07459dd524571245928c40e26e3de691472508f5632fcd4add1eebad559d504eca32c08a9

    • SSDEEP

      384:gBCwUYeQ8geEQyhUtXlcgCHe8DSMk8/UhU7ya4Lp0Ac9khYLMkIX0+GvRgbJ1:pwUEpet1cgCHe8DNN/UhUua4L

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      c10e04dd4ad4277d5adc951bb331c777

    • SHA1

      b1e30808198a3ae6d6d1cca62df8893dc2a7ad43

    • SHA256

      e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a

    • SHA512

      853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e

    • SSDEEP

      96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $TEMP/licdata.rtf

    • Size

      4KB

    • MD5

      5f333f4d98424ef810164697db684a20

    • SHA1

      dea3f43c2e3d2a74e70505707245cfd158e5914b

    • SHA256

      28e34433fec59e998e618dd41d51693e35f8b927bc980af5b5f897360b6ae7f6

    • SHA512

      d215e905670cc32eeb995e8b84c918d78bad19de32de46c85fd8fe952fcb684801262639f082bfc5456dde41040b5185783a5b675fff1096c803ea32ac438064

    • SSDEEP

      96:TJ+JU9GtK/i8Jn9S9DSJ9zSU9or3dHXqFeZJyxlHSErwztK0:3YK/JJnsRSJZSU+LdxryPSEQK0

    Score
    4/10
    discovery
    behavioral10behavioral9

    • Target

      $TEMP/rkverify.exe

    • Size

      368KB

    • MD5

      7ce09413d7e39a8d984d29b032499a68

    • SHA1

      23b404b6d460c57572e277883527a7af053dd7d2

    • SHA256

      7d9967027f313bdc045565d408fd278600d2f59557ef943b1dedd65a2bc2c320

    • SHA512

      27d75e7b62310c0203b71a57d296798a5201d3b7ead5fa946073a328ace9174f66f540069587ea982d84dd603f5181b98ca6ace1df654c8f6068dc520cc7dab2

    • SSDEEP

      6144:80Qrfc/0PXVVw0uHfQEVjwYcvsbkxbUSicNtUmUTBqwNtolgFV4/PxxCNlMW8:80QY8PXTwz7w+kWcNqmUTsw0l6u/P2N2

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks