Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

bc0c44357c...18.exe

windows7-x64

7

bc0c44357c...18.exe

windows10-2004-x64

7

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows7-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PROGRAMFI...R1.dll

windows7-x64

6

$PROGRAMFI...R1.dll

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc0c44357c2dd5683406f6523f65590e_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240823-rf3bpaycle

  • MD5

    bc0c44357c2dd5683406f6523f65590e

  • SHA1

    29eea060fca71efac3aecb7962c51d66e83b2e93

  • SHA256

    31a1553ca7cb23f86e5e841596311e489c7c5285b4ac49d4fe655a918f2a5723

  • SHA512

    68dad1bfe9260ed7b3d7d3fe4beea1ba766ad944a4a95be24968405b38e970c45c089ca5de9633dd63c9727e2cacfedeeb559bbbf50d8cfb75587b0fd7f3a8a1

  • SSDEEP

    24576:p1hV44mXVPitJFvB8ezCLEvmskrM5GVD/wKRaWdGX4IK9FwnkPr8m2NBMUO:DrFmXV68IkA5GD4Lort8/o

Score
7/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      bc0c44357c2dd5683406f6523f65590e_JaffaCakes118

    • Size

      1.2MB

    • MD5

      bc0c44357c2dd5683406f6523f65590e

    • SHA1

      29eea060fca71efac3aecb7962c51d66e83b2e93

    • SHA256

      31a1553ca7cb23f86e5e841596311e489c7c5285b4ac49d4fe655a918f2a5723

    • SHA512

      68dad1bfe9260ed7b3d7d3fe4beea1ba766ad944a4a95be24968405b38e970c45c089ca5de9633dd63c9727e2cacfedeeb559bbbf50d8cfb75587b0fd7f3a8a1

    • SSDEEP

      24576:p1hV44mXVPitJFvB8ezCLEvmskrM5GVD/wKRaWdGX4IK9FwnkPr8m2NBMUO:DrFmXV68IkA5GD4Lort8/o

    Score
    7/10
    adwarediscoveryspywarestealer

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/Processes.dll

    • Size

      35KB

    • MD5

      2cfba79d485cf441c646dd40d82490fc

    • SHA1

      83e51ac1115a50986ed456bd18729653018b9619

    • SHA256

      86b302fa9c85dfa0c1c03ba000864a928365dab571f3355347dba02da22949b7

    • SHA512

      cca186a7f9c5cff3f4eca410fbe8cc13dad2514a7e36aec9b1addfbcb239ace9b9b2d8427771858e3fd11783abce7e24d43c286f98da9f8b17562ca095a4c043

    • SSDEEP

      768:uxEiycFoaj/+WSiJfmjvab7L/cUf7IIlMLRF:uxEm7sgfmjy//cgdlM/

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/UAC.dll

    • Size

      17KB

    • MD5

      88ad3fd90fc52ac3ee0441a38400a384

    • SHA1

      08bc9e1f5951b54126b5c3c769e3eaed42f3d10b

    • SHA256

      e58884695378cf02715373928bb8ade270baf03144369463f505c3b3808cbc42

    • SHA512

      359496f571e6fa2ec4c5ab5bd1d35d1330586f624228713ae55c65a69e07d8623022ef54337c22c3aab558a9b74d9977c8436f5fea4194899d9ef3ffd74e7dbb

    • SSDEEP

      384:59TzaeW+WyB8c7LX+OGkrwWvVrkUiEMAWm5nskAvXkq:5ZaB+W62Mr5vGUiEum5sk

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PROGRAMFILES/Mozilla Firefox/$R1

    • Size

      1.9MB

    • MD5

      c57bfc1c24b16df571bf0a90124aabf0

    • SHA1

      32ab3c366bc32dc3ddc88c42eea70a4739f2e3c4

    • SHA256

      8a1cc850e65e92b960f33c999fcd2452f08899a8bf94f0f51e6cf03775cb403e

    • SHA512

      93e9918561235b22c5b276ba7454b8e7f3f09f35742d5766d7a81db20ff0f62e562a989eab2e32a517b12b4fb344436bfb97e2d7f6d0d950950bfd2d497edf1b

    • SSDEEP

      49152:WnRVFbNJaEFnzpWNKWkjPw9JlgZSWd5EqoD4TT5X2fWMK:QRPRzUwwp0SS/XX2e

    Score
    6/10
    adwarediscoverystealer

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks