Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

b4cf2d93ba...18.exe

windows7-x64

7

b4cf2d93ba...18.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$TEMP/aeac...tb.exe

windows7-x64

7

$TEMP/aeac...tb.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDIR/Math.dll

windows7-x64

3

$PLUGINSDIR/Math.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...st.dll

windows7-x64

3

$PLUGINSDI...st.dll

windows10-2004-x64

3

$PLUGINSDI...nz.dll

windows7-x64

3

$PLUGINSDI...nz.dll

windows10-2004-x64

3

$PLUGINSDI...ap.dll

windows7-x64

3

$PLUGINSDI...ap.dll

windows10-2004-x64

3

$PLUGINSDI...ro.dll

windows7-x64

3

$PLUGINSDI...ro.dll

windows10-2004-x64

3

$R0/AskSearchAsst.exe

windows7-x64

7

$R0/AskSearchAsst.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b4cf2d93bab4987e99b6056cc1c2f613_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240821-ylaxysxcrf

  • MD5

    b4cf2d93bab4987e99b6056cc1c2f613

  • SHA1

    9e453855d6000d5c8a192eebcfcda0b3eae05a92

  • SHA256

    9826c56553310f47f1c93419870ed935cc92b00cec23c7b0e04a275c00093c78

  • SHA512

    b4e875f01dbfc253e2ddeac35c81756cbabf8121d521d1e6b183f8af21cdd56157c18be97ae312c70bce162d167b8dd46b3ef474e38b610b5839b046ae493db7

  • SSDEEP

    24576:xIqpr552da20BSeveKyTiOxOlO07paHd7G:bFwd0fvKZxOxF2d7G

Score
7/10
discoveryspywarestealerupx

Malware Config

Targets

    • Target

      b4cf2d93bab4987e99b6056cc1c2f613_JaffaCakes118

    • Size

      1.0MB

    • MD5

      b4cf2d93bab4987e99b6056cc1c2f613

    • SHA1

      9e453855d6000d5c8a192eebcfcda0b3eae05a92

    • SHA256

      9826c56553310f47f1c93419870ed935cc92b00cec23c7b0e04a275c00093c78

    • SHA512

      b4e875f01dbfc253e2ddeac35c81756cbabf8121d521d1e6b183f8af21cdd56157c18be97ae312c70bce162d167b8dd46b3ef474e38b610b5839b046ae493db7

    • SSDEEP

      24576:xIqpr552da20BSeveKyTiOxOlO07paHd7G:bFwd0fvKZxOxF2d7G

    Score
    7/10
    discoveryupx

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $TEMP/aeac2814-61bf-4a12-8b11-c5ea3cfa382c/3rdparty/ins-installsphere-sntb.exe

    • Size

      720KB

    • MD5

      5c801d2972e144114396a6faccadc3a1

    • SHA1

      9ac84baf97f512a001d59b832bdb068906133765

    • SHA256

      9eb9a048df0047afef86de1c990059df5fb13a3858dd43a781926308954e13ce

    • SHA512

      86a1a1680686e4046d6ea920616cc224a55269760464bc4544ac13ddcdfd139a659cf5b546aaa5f974b89d1a9246592a78dd1ba1b7915be7b3f0c65d93958e8c

    • SSDEEP

      12288:56etUTOzafTvyFRn8KC3GaYnvDKj9dgu7YeJuyduK7+QPWNvJSn:56/TOieFRn8F7YrjutwdK7+kn

    Score
    7/10
    discoveryspywarestealer

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      20KB

    • MD5

      de2b06d8abcd4a1d3330e415ce638a6a

    • SHA1

      2f1bf738915b288530dedb861f4ea4f60069a91f

    • SHA256

      8f62633831a326174f05e89503e42a493aa834fa6d7ba7138d9d57ac5873512d

    • SHA512

      8dbc0edb71d6acc327418270b33d5627d7940ce406e54152af9f6c8f6d90c7239aa647a0e1f4769d0aa8bd3e38d60643e6356ff7a5ccf7dc44c5617f72277b70

    • SSDEEP

      96:J1szPlsFYmIGExrjwIqiwZePAYyU76b+4d:Juztr+8wzg7xN4

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/Math.dll

    • Size

      66KB

    • MD5

      b140459077c7c39be4bef249c2f84535

    • SHA1

      c56498241c2ddafb01961596da16d08d1b11cd35

    • SHA256

      0598f7d83db44929b7170c1285457b52b4281185f63ced102e709bf065f10d67

    • SHA512

      fbcb19a951d96a216d73b6b3e005338bbb6e11332c6cc8c3f179ccd420b4db0e5682dc4245bd120dcb67bc70960eab368e74c68c7c165a485a12a7d0d8a00328

    • SSDEEP

      1536:0P43WZ4Ql60gam+2MwRmPeqFVHbQH0ZZ1Iet:0wU609VMH0T/t

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      a5f8399a743ab7f9c88c645c35b1ebb5

    • SHA1

      168f3c158913b0367bf79fa413357fbe97018191

    • SHA256

      dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9

    • SHA512

      824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977

    • SSDEEP

      192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      20KB

    • MD5

      2f94245152dbd233e248909f9c01c578

    • SHA1

      ab4e5879c001b36a2f9ff214946599fd015edda9

    • SHA256

      4c4d85eb9725fc7fade03467990e3dd9671c29a7870c97e69babc2cb3c9adef9

    • SHA512

      f92830de27d6663be5e0df9e32cd88732bc7ee93b14c1ded65258c325d22436400801aff1124f40400c6c3b3c16e71deb08436714716f3888d13a8a6b6a32231

    • SSDEEP

      384:vBCwUYeQ8geEQyhUtXlcgCHe8DSMk8/UhU7ya4L+0Ac9khYLMkIX0+GvRgbJ1:owUEpet1cgCHe8DNN/UhUua4L

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/jsonparser.dll

    • Size

      32KB

    • MD5

      2067be2244a8a8d6d6229537076a4830

    • SHA1

      15a27838b7d791d19d4e1e2566b3eb94938c08e9

    • SHA256

      7affb86cc94deba6b61a7e85337264ef8e19ef6b8a83904e22bafecbc4e1bed2

    • SHA512

      42a2afd0dc4f0128231fbbf3b428a29bc20ca55f0f36ed02056666b8b6bb5116b409142fd5609528fc323b9987681494803dff492824bc322b94d08d370603a2

    • SSDEEP

      384:/iPnzsAzMhAEDKha6zmoh7ja939CH9aR5M+SKseGIJGVHHCldw9t+:/iPYAzMhAEsVj0NNHseGIgHiUt+

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      $PLUGINSDIR/md5dll.dll

    • Size

      8KB

    • MD5

      a7d710e78711d5ab90e4792763241754

    • SHA1

      f31cecd926c5d497aba163a17b75975ec34beb13

    • SHA256

      9b05dd603f13c196f3f21c43f48834208fed2294f7090fcd1334931014611fb2

    • SHA512

      f0ca2d6f9a8aeac84ef8b051154a041adffc46e3e9aced142e9c7bf5f7272b047e1db421d38cb2d9182d7442bee3dd806618b019ec042a23ae0e71671d2943c0

    • SSDEEP

      96:YV2qpbvYSflug0Dvxn6GuKM9sh1gdrN9+oB7FT9WibOoBZcko5N/:Yt5lugRK8hlvbwkKV

    Score
    3/10
    discovery
    behavioral19behavioral20

    • Target

      $PLUGINSDIR/nshist.dll

    • Size

      39KB

    • MD5

      56bf72527ae93d35cd8f8778ad29902b

    • SHA1

      3248a7ca75a3c2e715a13b455ccc5d45e04cf9b9

    • SHA256

      77f38240d729758f04fbd6ac00dc638e99ba27c42fa48200c99f51449e245343

    • SHA512

      c8ea0445bb83bb67dffa85b167fcc9b6ea874493442db5707e939ee0f2864a0d464ee605de486febffc27b60cd3c35a91302f226f6c4f13186119687a7e6000e

    • SSDEEP

      384:Rb8/5X+ZjXpv4jNfoOZdd5P79dHwvwXTnxsEVRhCSkX4vJtgJ4LxvI5PMC3vlhw:ecOBxTTBdHwvwXtsQRhCX4vG4RIKKw

    Score
    3/10
    discovery
    behavioral21behavioral22

    • Target

      $PLUGINSDIR/nsisunz.dll

    • Size

      40KB

    • MD5

      5f13dbc378792f23e598079fc1e4422b

    • SHA1

      5813c05802f15930aa860b8363af2b58426c8adf

    • SHA256

      6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d

    • SHA512

      9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5

    • SSDEEP

      384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4

    Score
    3/10
    discovery
    behavioral23behavioral24

    • Target

      $PLUGINSDIR/sqlwrap.dll

    • Size

      20KB

    • MD5

      56bb18722f8e42a53d7d4ea6a09e520a

    • SHA1

      7ccc0fa410cafec0a790e0c611087e1f61e8d7eb

    • SHA256

      35fd84a44cbbeda4ee7a7e40554c656a21506346862aa7af99ce74930522b20c

    • SHA512

      cee572a6ce1d1551da3e4efe7c5fa7a76ad4eeaccc583d856a350f24d2a3f9e8dc39fe885ce9aa9a696a24dda960ed920fdfbd97d7a3e7d327c1b0fb34ce691c

    • SSDEEP

      96:2zCgCtUTDB8h8+rTjT90eB/DlAvSioMRwLCVD4B9:QCgft07ivOLCVDW9

    Score
    3/10
    discovery
    behavioral25behavioral26

    • Target

      $PLUGINSDIR/timepro.dll

    • Size

      20KB

    • MD5

      009dbbdd1ef470dd752c2b73835da3e7

    • SHA1

      f97da6556b24302df8201a092eaa32a80d49064b

    • SHA256

      c1ed8c398108dc56fbb6fd6797c3c9df59447e2a2f198b72a45058124971b09c

    • SHA512

      dbffa0eb830b292e5550eb3f3cfce90f881282652afb0463672ece7eb0946c34a8f75c4852f77b1db3604f0f346d0ed9d9babbad40b41de109e9f5119d555ec5

    • SSDEEP

      48:iPDeRFIHpvCelHXKvDRnEungRnEYngia6JsRhdt3Ft5GoO1JqN1:kfhlRKdnEungRnEYngia5X3Ft5GF1J

    Score
    3/10
    discovery
    behavioral27behavioral28

    • Target

      $R0/AskSearchAsst.exe

    • Size

      106KB

    • MD5

      28387db3bfa8ed7f1ba742b02b0c09d8

    • SHA1

      517e2757282999db9cf823c2d7dedfa07342d5ad

    • SHA256

      6e314a62cb2e33d5d5df9720ad8c0b5b466c2cc4a6fd12eeb5b633b8c72df3ba

    • SHA512

      b6ea8554e6c8c614fe065e9915cfe0a8832b2f55bc30906f2ad8151911c70fbc37f8e6f456897c0409e28f10338bbc545f529feb91b54821dd867f5c749b7767

    • SSDEEP

      1536:upgpHzb9dZVX9fHMvG0D3XJjAyASrBYt/nPl1wuK+J/K4Xhf6tW1svQf93wpoebw:0gXdZt9P6D3XJT/tOt27dW1sIxm9bw

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral29behavioral30

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      0dc0cc7a6d9db685bf05a7e5f3ea4781

    • SHA1

      5d8b6268eeec9d8d904bc9d988a4b588b392213f

    • SHA256

      8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

    • SHA512

      814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

    • SSDEEP

      192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo

    Score
    3/10
    discovery
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

upx
Score
7/10

behavioral1

discoveryupx
Score
7/10

behavioral2

discoveryupx
Score
7/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discoveryspywarestealer
Score
7/10

behavioral6

discoveryspywarestealer
Score
7/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
7/10

behavioral30

discovery
Score
7/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10