Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

155绿色�...��.url

windows7-x64

1

155绿色�...��.url

windows10-2004-x64

1

startdelay...02.exe

windows7-x64

7

startdelay...02.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

7

$PLUGINSDI...es.dll

windows10-2004-x64

7

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...re.dll

windows7-x64

3

$PLUGINSDI...re.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...or.dll

windows7-x64

7

$PLUGINSDI...or.dll

windows10-2004-x64

7

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDIR/fct.dll

windows7-x64

3

$PLUGINSDIR/fct.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

ComponentF...or.dll

windows7-x64

1

ComponentF...or.dll

windows10-2004-x64

1

ComponentF...it.dll

windows7-x64

1

ComponentF...it.dll

windows10-2004-x64

1

Startup De...er.exe

windows7-x64

1

Startup De...er.exe

windows10-2004-x64

6

Startup Delayer.exe

windows7-x64

3

Startup Delayer.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf90d2bb35f8677295196e49f6e2cf81_JaffaCakes118

  • Size

    6.6MB

  • Sample

    240906-p1q32sxamq

  • MD5

    cf90d2bb35f8677295196e49f6e2cf81

  • SHA1

    889bd1e25227758c90f686afa2a6dd02143e2a57

  • SHA256

    2bbf54428e9587337010a261cc4b211d142a0cb28040935f6ee9e8ec7950eb79

  • SHA512

    ce7289e14ea876266cfb53b0ef0d4ec644d63501d7ab885288469dcc45993aff6e307e2ca38766265b22fc270a993946456e07227c01088a059ef4ff9c506f02

  • SSDEEP

    196608:EbYSGsGl7i+C63pUauEmDpz2gnxFxpsX+9wbuO:cYtFG43OlEMpqgnxpsX+9Y

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      155绿色软件站.url

    • Size

      219B

    • MD5

      3a1f2a8a3ef08ae269517a69ea918b2c

    • SHA1

      7d2e6719702bc8472e045e010efa6ed3f7df4b5b

    • SHA256

      66eafefa8bb0155e60828476bde6068573fe64a4fd0aa052eba074dbe85d46cd

    • SHA512

      22203a78192cadc02d0f887247675925273a69e3be82ec1a331197f892216a282cc8f37c3ffbfb578a708244181037277b8cc6a40d8ec70cdf0feac5d80f8576

    Score
    1/10
    behavioral1behavioral2

    • Target

      startdelay_v3.0b302.exe

    • Size

      6.7MB

    • MD5

      e827f54309287f98350b3fa1884093b5

    • SHA1

      44a88bab2ef377cc12258a16321b18f320bbd5a9

    • SHA256

      727541c12f2f9eb44ce6a814602e43fc19cfa872b81d8854a7b618421645713f

    • SHA512

      993c770a004ad77951ccdc1d5ca51129b90da1a73a38ef386b70a7836b90cb92f18f338b81096e48f7355886e3f83d96f24af9f87f84e9c438a196978b9bd5dd

    • SSDEEP

      196608:g7Hc3Stzfaxjg2Y8xVH+mRmxecIMfoaHapl/PDlKAbchU+zJj:QCxjg2PVemRm3BQ4YdPDXchU81

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral3behavioral4

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      0dc0cc7a6d9db685bf05a7e5f3ea4781

    • SHA1

      5d8b6268eeec9d8d904bc9d988a4b588b392213f

    • SHA256

      8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

    • SHA512

      814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

    • SSDEEP

      192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/Processes.dll

    • Size

      28KB

    • MD5

      0ffb8c12fc809255f372259150bb8fde

    • SHA1

      de60be3dd7ad111be9324db8205bda7a69fec1b1

    • SHA256

      bd82c9375c0efc44ada6e427090f75affa3a8960cf9180ebad046a77a9f146af

    • SHA512

      c5c89158745a50b542c7ef3940beb5858367d8cce5f73b4b9d4da67548c13ffb14b63c15f315528753b9ca9fde83e0e971106ada8b7cc50b5047015b280f38dd

    • SSDEEP

      768:fBXYB0dM5wjrFgygbaFOSH8P0eK+6ZURF:fB1M58FEbgwVK+1

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/StartMenu.dll

    • Size

      7KB

    • MD5

      4e96f412a8cc653053d5d918df6b0836

    • SHA1

      a3c7d59043feecb1603874b27c23d4166b341f2d

    • SHA256

      e4a54bfc327986a89165bdef361069810aaa985c3abecd442c786725fabaf977

    • SHA512

      2fec61b4ad31250bdbdbbfd551d831801790b96902c67200661e8f4f2753378bbf6c0c88b12e1be9173a29597827c1c4809511b6d52666dc3324bd7031c8229d

    • SSDEEP

      96:IiqA7bDe2xHkR1C41EhvSE+6nNtMn0iGd8CqRLqtJ1trRhElfL:IiqA7/ZH0uQMtcfCqo/tdgf

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/SysRestore.dll

    • Size

      4KB

    • MD5

      476d5ab1659b41270bc4aaa0f5452230

    • SHA1

      10d0d50be8a469770f33b603c3e4b1bc666d7660

    • SHA256

      ebea68238d14151245faf1cb198affd90333a07ed87dbe6657e3ed8b45db52fd

    • SHA512

      30278be6234e88ab7b59c17c4249ca6853e843c7fdfbc77befff63562a95a9957e25923cb1229c7833beda0236d43c6adf7f1f04a4c2f96ba1468c9d3768b6a7

    • SSDEEP

      96:4FfjkpLKkf/hZSm3J41wo/BC7tCEj2pC:41Xy41B/iyC

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/UACElevator.dll

    • Size

      36KB

    • MD5

      9049a47cfbded47d5c1b070747daf6cf

    • SHA1

      f5fc68906458850532732a6787f465666db3046d

    • SHA256

      5118988cb678012ae4d5060eb8b0dd871be7fd514161b3c1751c066cdf352dff

    • SHA512

      06c9081dea195843a850dce715c31019776453b3efd894ad7c0613ea29e2c0ced31499e635850f117ae72a1bd71046ce343835d18d033ba14fcaf5c60725f2e1

    • SSDEEP

      768:ARS2nTOUZ+BisEjlm45ngj29qvnr8EliXajbLZ059:USwqUZ+BXEk45nVuARcyD

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/UserInfo.dll

    • Size

      4KB

    • MD5

      1e8e11f465afdabe97f529705786b368

    • SHA1

      ea42bed65df6618c5f5648567d81f3935e70a2a0

    • SHA256

      7d099352c82612ab27ddfd7310c1aa049b58128fb04ea6ea55816a40a6f6487b

    • SHA512

      16566a8c1738e26962139aae893629098dc759e4ac87df3e8eb9819df4e0e422421836bb1e4240377e00fb2f4408ce40f40eee413d0f6dd2f3a4e27a52d49a0b

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      $PLUGINSDIR/fct.dll

    • Size

      4KB

    • MD5

      e3f3809f51c7982d96aaf9c090f7d176

    • SHA1

      7494daa8000c0b31c58d94edc509232569a4606f

    • SHA256

      010f5e0c69b4a630b08b2551e03d8044a33350f151848dcf50953407012fab29

    • SHA512

      3fca284e384abc95201dc73f19bd9d75413e8890e819967070b9d9991115be2a8c17e07bd1aaaffcbc770b393bf9a2af253100ac4d9efba8d21110bac97737fc

    • SSDEEP

      48:qlQOVagyAU3gJS+Tgc43uiu7Dh/gdp/gRfykVwv+:qa33gJS+ccQuiuJE/kyku

    Score
    3/10
    discovery
    behavioral19behavioral20

    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      24KB

    • MD5

      1efbbf5a54eb145a1a422046fd8dfb2c

    • SHA1

      ec4efd0a95bb72fd4cf47423647e33e5a3fddf26

    • SHA256

      983859570099b941c19d5eb9755eda19dd21f63e8ccad70f6e93f055c329d341

    • SHA512

      7fdeba8c961f3507162eb59fb8b9b934812d449cc85c924f61722a099618d771fed91cfb3944e10479280b73648a9a5cbb23482d7b7f8bfb130f23e8fd6c15fb

    • SSDEEP

      384:XErRo4TdlKCdUk6qz46qu2vPqUcnlSHmkuPJOiya4fF0Ac9khYLMkIX0+GvBgK3M:XiRoW7Kc5bBq1qNlSHmkuPJOJa4f4CD

    Score
    3/10
    discovery
    behavioral21behavioral22

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      e54eb27fb5048964e8d1ec7a1f72334b

    • SHA1

      2b76d7aedafd724de96532b00fbc6c7c370e4609

    • SHA256

      ff00f5f7b8d6ca6a79aebd08f9625a5579affcd09f3a25fdf728a7942527a824

    • SHA512

      c9ddd19484a6218f926295a88f8776aff6c0a98565714290485f9b3b53e7b673724946defed0207064d6ab0b1baa7cb3477952f61dbe22947238d3f5802fa4f4

    • SSDEEP

      96:57GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgN532E:VKgfwgcr8zylsB49Ud0qJVgNQ

    Score
    3/10
    discovery
    behavioral23behavioral24

    • Target

      ComponentFactory.Krypton.Navigator.dll

    • Size

      501KB

    • MD5

      6db097232c0fcf2834ce7dcf90286fe7

    • SHA1

      93713f9e4eb4c7b07aebacb708c1791a23c767bb

    • SHA256

      0f08376dc6d2b922da9eb294e41c2b920cebf3064d9f70a60e639d8ed901b402

    • SHA512

      6a42da9bcaeb10d3fb3b02e51be45fcad0f0eed2b4d4fb2b622c3247c9d214bfac98688226b99093e1dd15343eabc8da11c1004c7a38a5a39f15bb3798d65acc

    • SSDEEP

      6144:Ld9/noEPh97NBgKhVXd3uKTAlq1FCvP9kd+JsOfh2jwQCHJL39n1HbvytF/G:Ld9gELgKhn3V0T9kdpe2j1gJL39Qb/G

    Score
    1/10
    behavioral25behavioral26

    • Target

      ComponentFactory.Krypton.Toolkit.dll

    • Size

      2.5MB

    • MD5

      d198b64cde8741eb7eb02d0a84a52d0d

    • SHA1

      136a52b26e317535664f4bb839e4fe6424975756

    • SHA256

      4f08949370d13d2e5bd9ea53c9a4e188d741d470c2535cbb42590d5af5585ccd

    • SHA512

      d96ed96176074cfa82e776e9b6f696002cea6e67cb4208476ba186b0b6a8d50f4cb8775bf5a24e5facd53bf18e9ebb1611bccbe45488e3c8305fe1a44dfde782

    • SSDEEP

      24576:KFPbfiLZ8jZoV/KYMW0joHhUZpmmHIu1Xu6wxv9EL/rswjb:KFuZ8jZoVGWooHUM1E84

    Score
    1/10
    behavioral27behavioral28

    • Target

      Startup Delayer Localizer.exe

    • Size

      661KB

    • MD5

      a1432d2ac0877386eb34f199c1b0aff9

    • SHA1

      af16618a3d1f6f0638447afb1f24a6ceddb6f176

    • SHA256

      1e795a85303828431e1354ecd6ec40a79a66051e4b9c1b20ca34f948a1677b88

    • SHA512

      f1e3338c235faf5e00bf839266bae017f3d6e1bc5a246d7fdac2a66fecc3c0dd6e834c92ecdc170a4b42deb175fe1e96df6145f5e35cd702c2ef27cafca19b2d

    • SSDEEP

      12288:2evut/cNDdZqcvggynxZxBSuKvwFhpnqWnoZHVGCXA0B:N2t/CdZRvgggxZ1K49nbno/GH0B

    Score
    6/10

    • Drops desktop.ini file(s)

    behavioral29behavioral30

    • Target

      Startup Delayer.exe

    • Size

      3.9MB

    • MD5

      909e3113d00adfebf817c7c5d971feb6

    • SHA1

      fad10e5fa809f7419ce3d164809ebccc97380968

    • SHA256

      5e134a61372ddfe554ad53e01858023941c890eb2f9828efe9d944f49d99cbb8

    • SHA512

      b35551bf6e3b6e63c5b2b5cb968cec3a8188b96bf930b77d7bb6c9b3cea338c1a1a3972b8afe1423f3c04d2082c3a1024309c532732317af3dae890e59e21da3

    • SSDEEP

      98304:WFputdH6WVeLWV4lfQbj4fqYJj3XdvtoaMzDwxymBGFp4NHvOmNUC2V4nttMkf+K:maH6WVeLWV4lfQbj4fqYJj3XdvtoaMzy

    Score
    6/10

    • Drops desktop.ini file(s)

    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

upx
Score
7/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

discovery
Score
7/10

behavioral4

discovery
Score
7/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discoveryupx
Score
7/10

behavioral8

discoveryupx
Score
7/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discoveryupx
Score
7/10

behavioral16

discoveryupx
Score
7/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
6/10

behavioral31

Score
3/10

behavioral32

Score
6/10