7d7c5995bd4a9355ae32d11807b360d5d6bb15ebf9873622b3e24aad6c2f2da6 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

b8bea7e30d...18.exe

windows7-x64

7

b8bea7e30d...18.exe

windows10-2004-x64

7

Sharing

General

Target

b8bea7e30d8308b1c7b1a4f925622d18_JaffaCakes118
Size

116KB
Sample

240822-xjrbgsvell
MD5

b8bea7e30d8308b1c7b1a4f925622d18
SHA1

aa6dbbe1d155e431af4fdbc5415163f4d716db9f
SHA256

7d7c5995bd4a9355ae32d11807b360d5d6bb15ebf9873622b3e24aad6c2f2da6
SHA512

1586127f8d6d6ee963320b3eea65c1329ccdfd495eac547ed60380e6cc06bc4315b38745d704e9c2da0f499153282d00cf946de79397c5477df994852ceafa8e
SSDEEP

1536:LznfWynDYXtilW2DTvOB0rnqm5CGmGXjKkAbcX+pCaFy5YzAT+/vpFvnjfZV3o:LzuOYdsmsnr2G1AbW+pp4r+frz3o

Score

7^/10

adware discovery stealer upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

b8bea7e30d8308b1c7b1a4f925622d18_JaffaCakes118.exe

Resource

win7-20240729-en

adware discovery stealer upx

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

b8bea7e30d8308b1c7b1a4f925622d18_JaffaCakes118.exe

Resource

win10v2004-20240802-en

adware discovery stealer upx

windows10-2004-x64

16 signatures

150 seconds

Malware Config

Targets

- Target
  
  b8bea7e30d8308b1c7b1a4f925622d18_JaffaCakes118
- Size
  
  116KB
- MD5
  
  b8bea7e30d8308b1c7b1a4f925622d18
- SHA1
  
  aa6dbbe1d155e431af4fdbc5415163f4d716db9f
- SHA256
  
  7d7c5995bd4a9355ae32d11807b360d5d6bb15ebf9873622b3e24aad6c2f2da6
- SHA512
  
  1586127f8d6d6ee963320b3eea65c1329ccdfd495eac547ed60380e6cc06bc4315b38745d704e9c2da0f499153282d00cf946de79397c5477df994852ceafa8e
- SSDEEP
  
  1536:LznfWynDYXtilW2DTvOB0rnqm5CGmGXjKkAbcX+pCaFy5YzAT+/vpFvnjfZV3o:LzuOYdsmsnr2G1AbW+pp4r+frz3o
Score

7^/10

adware discovery stealer upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealerupx

behavioral2

adwarediscoverystealerupx

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.