Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

aef6897757...18.exe

windows7-x64

7

aef6897757...18.exe

windows10-2004-x64

7

$0/finderquery.dll

windows7-x64

1

$0/finderquery.dll

windows10-2004-x64

1

$0/finderquery.exe

windows7-x64

1

$0/finderquery.exe

windows10-2004-x64

3

$0/uninstall.exe

windows7-x64

7

$0/uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aef6897757c06346566f8db9ac13351a_JaffaCakes118

  • Size

    997KB

  • Sample

    240820-m46lsssbjn

  • MD5

    aef6897757c06346566f8db9ac13351a

  • SHA1

    b4cb09b65cb999741ff5b14243d58106841fe2f1

  • SHA256

    d0f8c38d4c1bd79eea3ccd442f529671e254d101f169f8125aea395601f884c5

  • SHA512

    53e63c21b31aca34e51edf144558c4d2649cd36302194f19f9e072fb83608fa2997ae23d3d371242d1a7c6e9aa3194d54e83630384f4348b709658980cffc3fe

  • SSDEEP

    24576:pHhoKaMIby7GYuqUuswKikhq4U5X+80cs0Ybj/hkagf9rm:Fho52ZVUuknq/5X+80cs062agf96

Score
7/10
discovery

Malware Config

Targets

    • Target

      aef6897757c06346566f8db9ac13351a_JaffaCakes118

    • Size

      997KB

    • MD5

      aef6897757c06346566f8db9ac13351a

    • SHA1

      b4cb09b65cb999741ff5b14243d58106841fe2f1

    • SHA256

      d0f8c38d4c1bd79eea3ccd442f529671e254d101f169f8125aea395601f884c5

    • SHA512

      53e63c21b31aca34e51edf144558c4d2649cd36302194f19f9e072fb83608fa2997ae23d3d371242d1a7c6e9aa3194d54e83630384f4348b709658980cffc3fe

    • SSDEEP

      24576:pHhoKaMIby7GYuqUuswKikhq4U5X+80cs0Ybj/hkagf9rm:Fho52ZVUuknq/5X+80cs062agf96

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $0/finderquery.dll

    • Size

      868KB

    • MD5

      d306a83ccaf304f0429bfbbdc133f6a1

    • SHA1

      073f3cb20a86a53a523969f587d7395331f7f51e

    • SHA256

      64b7139a540f2db7087814d38cc48de746619febbbc9cae5b4930885aee19a29

    • SHA512

      09fde419a15a692c7430d2b9a1c1c752a140c9e127294214c3f205e2a59f64570da061a385a14784209f5132f943cc5edbe772c3da5328225e745d5e0f550aa5

    • SSDEEP

      24576:loz79/W8ftZRmZKK2/bdxfIrDuuVBFdhExqll:OFOIRzPIrDu0PYs3

    Score
    1/10
    behavioral3behavioral4

    • Target

      $0/finderquery.exe

    • Size

      22KB

    • MD5

      2bc4213d5acf1f7b1b5905903ef1758b

    • SHA1

      faa93306d30dd4b6a36922a12e38d698b2e0f468

    • SHA256

      309dd31efa8e88b9bc56107640fca959edef97afd169022c7b257c85db5ee5ab

    • SHA512

      5bb678e603247fe47b47c8deb32dbb9d49780f0c1b040186402e182d0fa8e03fe897bbd84b69278267b8ac0fbdbe950362ff3df41d9dfb4d66e407dfd5d58416

    • SSDEEP

      384:VQyfQr3oym2w1DIgOURCbVLVg1Makja/olEuY3vJml:Oy4VJw1DGFBhg1Makjmuzisl

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $0/uninstall.exe

    • Size

      78KB

    • MD5

      6cb48d1cb718fc05f23b74f20da3b939

    • SHA1

      497efb2296e4365d4bd71bee79db83eb7c8d9421

    • SHA256

      1778f4f2b601716e35b489909435adf17bcb02d5354d2fbe3fc939d4c883d037

    • SHA512

      402842ea693536b017b37753de398ae01ade1bfd99d6907d52e480b47388bb0f712fe8e9b587e4a1639d22caa52ab6299349c9a73ed80d04c8cce8ecddf9eb16

    • SSDEEP

      1536:PEkjY1zy214Qay0DGkJ7qAELVigJocpu/tQ4W2w6LZU/x+6cN1WV/2/D/:8kjAJ4dDGkJ+AI0+6CJwZU/xfcN1WVuT

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral7behavioral8

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      13KB

    • MD5

      d765c492c21689e3d9d61634371fd861

    • SHA1

      ac200933671ae52c9d5544d0e2e8e9144d286c83

    • SHA256

      551e6042dd494ea01549555ffc194ab9729da09058ec714eb368dd06642c9bbc

    • SHA512

      9919a9e848c8f1e26c75d0d29207571e4b86a4140bd554743d2c1f8bd7f386fe4919345b163d89a5d907fb165e435ba0ac5f6b1101713636141f156a420e2e0f

    • SSDEEP

      192:9B6RvrfvOuJQDghBy/X7QKq3TLGciZJf0EzWzMnz6WoF1dBs:v6RrviWaX7eiZJ7nz6bB

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      fe24766ba314f620d57d0cf7339103c0

    • SHA1

      8641545f03f03ff07485d6ec4d7b41cbb898c269

    • SHA256

      802ef71440f662f456bed6283a5ff78066af016897fe6bfd29cac6edc2967bbd

    • SHA512

      60d36959895cebf29c4e7713e6d414980139c7aa4ed1c8c96fefb672c1263af0ce909fb409534355895649c0e8056635112efb0da2ba05694446aec2ca77e2e3

    • SSDEEP

      192:rO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1aMBgMO:yKAFERdlxhGRYUzqZaMB

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      13KB

    • MD5

      d765c492c21689e3d9d61634371fd861

    • SHA1

      ac200933671ae52c9d5544d0e2e8e9144d286c83

    • SHA256

      551e6042dd494ea01549555ffc194ab9729da09058ec714eb368dd06642c9bbc

    • SHA512

      9919a9e848c8f1e26c75d0d29207571e4b86a4140bd554743d2c1f8bd7f386fe4919345b163d89a5d907fb165e435ba0ac5f6b1101713636141f156a420e2e0f

    • SSDEEP

      192:9B6RvrfvOuJQDghBy/X7QKq3TLGciZJf0EzWzMnz6WoF1dBs:v6RrviWaX7eiZJ7nz6bB

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      fe24766ba314f620d57d0cf7339103c0

    • SHA1

      8641545f03f03ff07485d6ec4d7b41cbb898c269

    • SHA256

      802ef71440f662f456bed6283a5ff78066af016897fe6bfd29cac6edc2967bbd

    • SHA512

      60d36959895cebf29c4e7713e6d414980139c7aa4ed1c8c96fefb672c1263af0ce909fb409534355895649c0e8056635112efb0da2ba05694446aec2ca77e2e3

    • SSDEEP

      192:rO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1aMBgMO:yKAFERdlxhGRYUzqZaMB

    Score
    3/10
    discovery
    behavioral15behavioral16

MITRE ATT&CK Enterprise v15

Tasks