Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

d0fef0a79c...18.exe

windows7-x64

7

d0fef0a79c...18.exe

windows10-2004-x64

7

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

SlgClientS...ts.exe

windows7-x64

7

SlgClientS...ts.exe

windows10-2004-x64

7

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

aminstall.dll

windows7-x64

3

aminstall.dll

windows10-2004-x64

3

fmod.dll

windows7-x64

7

fmod.dll

windows10-2004-x64

7

gd204.dll

windows7-x64

3

gd204.dll

windows10-2004-x64

3

granny_download.exe

windows7-x64

7

granny_download.exe

windows10-2004-x64

7

help/controls.htm

windows7-x64

3

help/controls.htm

windows10-2004-x64

3

help/credits.htm

windows7-x64

3

help/credits.htm

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d0fef0a79c28f97c5df3e1ba89d06437_JaffaCakes118

  • Size

    9.4MB

  • Sample

    240907-d6re8ashjr

  • MD5

    d0fef0a79c28f97c5df3e1ba89d06437

  • SHA1

    268102788e80ce337db68ed90e786a758347c178

  • SHA256

    f680afa8207b8930f5bc4deedfe3331f5b79ed6f58790a83a04e692614eac552

  • SHA512

    aeba4e5c7c76b9205eb392d1518b9bd598b679dae33fd726a9ee30f57929a719f6cf2e8d7adcd3c85c5d4885ed134bd54ac161e1dccd4d94f4adf0765a9e2fd5

  • SSDEEP

    196608:T93mTYGz0CvYS1fVkz964/KUx+0yfMVz42jQfEYIdnZpCvK2dRfPoyriNuUHmCVw:TATbZvncl/3+SV9gdIuRfPbrKDC

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      d0fef0a79c28f97c5df3e1ba89d06437_JaffaCakes118

    • Size

      9.4MB

    • MD5

      d0fef0a79c28f97c5df3e1ba89d06437

    • SHA1

      268102788e80ce337db68ed90e786a758347c178

    • SHA256

      f680afa8207b8930f5bc4deedfe3331f5b79ed6f58790a83a04e692614eac552

    • SHA512

      aeba4e5c7c76b9205eb392d1518b9bd598b679dae33fd726a9ee30f57929a719f6cf2e8d7adcd3c85c5d4885ed134bd54ac161e1dccd4d94f4adf0765a9e2fd5

    • SSDEEP

      196608:T93mTYGz0CvYS1fVkz964/KUx+0yfMVz42jQfEYIdnZpCvK2dRfPoyriNuUHmCVw:TATbZvncl/3+SV9gdIuRfPbrKDC

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/Dialer.dll

    • Size

      3KB

    • MD5

      de4b7820e03027762f0255059dccef1b

    • SHA1

      b5545c72537fe89d4db4286a8448db62edc56c2b

    • SHA256

      39b9f9e1ff6c4f4ea9739cad159448b6bf5f570b09b839d5f43f2abd79c16771

    • SHA512

      9152538cf1ea8c9f1a6b082f4cacb97cb05be915ff608125d4c705a8611a1e9368930e5284c820ff0f1106075a65e14d45052de6a75d7878ad5f75111d134455

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      12KB

    • MD5

      57db62366ef11fdc47922a02031f0492

    • SHA1

      6d30db5285b653025f94e74b9b045870dc0aeb7a

    • SHA256

      2338752092918db8e068d55bea61f8cdeb9be37b6e6d30a730d9703b169b08b4

    • SHA512

      d0257e02370863e07feb9346b88d87a102089f0c48aea13e069e55a14f0f6db51fb3d5f41ed5d2f39e36b612f4b6194a6b7c059709808bfb23ded89d0b0a3db5

    • SSDEEP

      192:gzixixDOHhG9db9rd+oSVPECMlh3I8tqDynq7hwbbHF1QuCb:gOx0DOHqrdwTY6+nq72bbMum

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/LangDLL.dll

    • Size

      5KB

    • MD5

      51d66dbc791228d8411159379523d971

    • SHA1

      029981130567cd45cb98cff5041acbec13d6ba3f

    • SHA256

      9a2d4add45790a47d56aa67b9199b66119ec0a21185f3df6fabbc56a9b47cb88

    • SHA512

      c224b16c27869767f7fe403094797bc580b4710c92f05f7fad5fc405e834bd12b2c5022fa6e380ad7e2f58650115afe8792ce8bfba932c4fb46e8d27d99ccc7d

    • SSDEEP

      48:SHEnz1tBa/XC1TQO50vwovgxVLrh2TpXHW+iJ/L9Cp+0rf1uapRkdfhhdJcN:H9UXC13C/ovLrh2cD/L9NochjcN

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      12KB

    • MD5

      e32c7911814ae37f75ad9340fce9f46c

    • SHA1

      a24483c292fc1a89fe34962cc6fb685d16b42e97

    • SHA256

      a0de27810988abaa75ef1a3b8035a56f6632ee9bd9412918dda608dfe1ad6e4d

    • SHA512

      1201782253eadba8381d660e9e67bf2c74fee92955802e569d8172613d4ef8524985b3a747bb17d0ff256c2ca43e329d1414eacf3491092f4d12efd5b53927e2

    • SSDEEP

      192:BTed/9E1XMNUrW7VymsS9W+7HaQM7zFSnQXiCVIXuZsav+zPzrR2RMi:BTqE2UrW9tWeaQ6zF1NIXu6a2DP8Ki

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/StartMenu.dll

    • Size

      6KB

    • MD5

      7e45b2485d98ad5a44514b6df4fa4544

    • SHA1

      bf000b012b341925aaddb546331064bd6949816c

    • SHA256

      95cf100fe8ce66189514002965c6274d2c9d3089fe885fb9230aae547a9e4012

    • SHA512

      01fa8e8cfb85243cc7ea89ede30aad21eed56508cc39e327c847a0c6c2121c3882d5b7068a1d56bf37d576d589697a58c1de8fa168707aa25d5e3aaf0486fa0d

    • SSDEEP

      96:JLJdRZk8OkmE+WHw0FMXF6CWhFxKpKsxQhEfP0:JLjPk8OT30FFA2CP0

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      b21538d9f049d3e3e8b666744d7ca36d

    • SHA1

      b97fc58f9aa238758a7574a2e32dac4e97392f47

    • SHA256

      9dbe958fd425903ffc2197a112bec4fa597284f9637fe8fd5685016f32e21334

    • SHA512

      05d2c660a43519fd35daa3b4310419b33e61ce8557bde55942315ca59c3b9cb9fdeaea42c403ad78a54fa9923eaa712bcf5a10dea83619a18c4ef0c451e6d533

    • SSDEEP

      192:ROSsJI/rqmIDNLU0dq51EgAiNbubv6xLZ:/HQQ0d01Egbq76x

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      SlgClientServicesRedists.exe

    • Size

      1.0MB

    • MD5

      e5b4efbfd41a4c75df2d908642401a03

    • SHA1

      bb4c8812e2bc8dc2f81749890ef440a829e1cba8

    • SHA256

      f35e3c3154dcaa68be969d03c4878aec6de37dbc2f1d970acd32a62c7d96b4a0

    • SHA512

      4619dbe07355c00f9a49be9d4786ecffe77681961adb0b4a424c9982597ca3d60d123ea9ea19e7c24577a1b16e6ce16fe9ad6c4adb3ce0491040ab92abf85b0d

    • SSDEEP

      24576:AFEIibLW+fiAEeZdhwHpUt8UC83avf/sLi:Q8y+fZvhwHpUqb837i

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral15behavioral16

    • Target

      Uninstall.exe

    • Size

      139KB

    • MD5

      ed1c562c19cf1b28368e3fe2de30ef4a

    • SHA1

      5d7e6a441670f6275f6c57d36dfd7560a22b7745

    • SHA256

      016d6577aa8cf4f336b538f04a520aa018a5b44fcefe947f904fb917fa6174ee

    • SHA512

      5fac7ab25ae1623bfe518c8399106c90cd811bf5452139ffb15bd95a6d9d5de726106e295c6eb82949b5a0ec4838aa3c2e7b52301c86584c5f7a8db9a9a8169e

    • SSDEEP

      3072:rk5+bFdkJeGQ/7PePsy5MiPzhqVHxSCGwJOy59G53bApcTkKTjG5:00x3beP5MiPVujzOy5QjY

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral17behavioral18

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      12KB

    • MD5

      57db62366ef11fdc47922a02031f0492

    • SHA1

      6d30db5285b653025f94e74b9b045870dc0aeb7a

    • SHA256

      2338752092918db8e068d55bea61f8cdeb9be37b6e6d30a730d9703b169b08b4

    • SHA512

      d0257e02370863e07feb9346b88d87a102089f0c48aea13e069e55a14f0f6db51fb3d5f41ed5d2f39e36b612f4b6194a6b7c059709808bfb23ded89d0b0a3db5

    • SSDEEP

      192:gzixixDOHhG9db9rd+oSVPECMlh3I8tqDynq7hwbbHF1QuCb:gOx0DOHqrdwTY6+nq72bbMum

    Score
    3/10
    discovery
    behavioral19behavioral20

    • Target

      aminstall.dll

    • Size

      76KB

    • MD5

      5d34df8934fe0b1dd256ba6d7dbf9901

    • SHA1

      28ee278aa00c1b74d8770e64e34473dfca95c390

    • SHA256

      feaa0248e6449097ca87a2acdd00352608258cbdbabecc8e8875ed2cf9192c32

    • SHA512

      1c832646932161b8db09da650adfdf18c74d5ebee30528fc28e6f02547d390893bbab2c39f3f33e6daf2a307076cacb09969850bebac4131ecbe7000c83ec353

    • SSDEEP

      768:6gV5PtiqaZ1V7V5yytiCLqmfTKeqvi8NT7jypjGZ1wZgH1Y10BlnkE52zjuxwcWP:6o1tgFXyy1luTXyVMwW1NkEQj1cW

    Score
    3/10
    discovery
    behavioral21behavioral22

    • Target

      fmod.dll

    • Size

      157KB

    • MD5

      53f2a550bb1b7333f44112ab18482c33

    • SHA1

      cc1330cb0afc9fcf62588b89c66a92803408506e

    • SHA256

      d4b8a9555e5073fb87624b56ca21451047d4763458a328e765fa93d0d80f8aad

    • SHA512

      eaa72d9b78833678f9b9ea2f2e604994711ee5f221817dbfb82d1990bcfc264e9979a0cf499794dcee3e5b2af53f1c7b5bbc61c4b3c29095b9c8d2832bf779c7

    • SSDEEP

      1536:m6gnQQ6WgWV2Mxh4MoU6bId5xlYxUDzQUDMd8ZEVIhiBQe6A0j/MVfEGuZL5yfso:mfQcpYMxGSY3qTZbZeHpE1vVWZbxF1

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral23behavioral24

    • Target

      gd204.dll

    • Size

      400KB

    • MD5

      d31d49b28dfc908935e768bc93c00c0a

    • SHA1

      8f5e8fa1983527efb1e9a6583e4b23cd0ae2bbdb

    • SHA256

      5201bf386fe3d0b9a16c7330d6f5b44b66c793b4d11fdd6cf5984c32986fbbe7

    • SHA512

      8391a78dc03c9fb94b6c7ebb36666c1694de70d12523bfb6e1340474239384c2970fd69a8302b979bc328ae32c3af4de140d78012674bd727e3371a609eda03b

    • SSDEEP

      12288:NZ0b/FpnwTXBT/tii9cRERjUxX+G5g4VyFG:sb/FpnkJtii9cRECxuGBVMG

    Score
    3/10
    discovery
    behavioral25behavioral26

    • Target

      granny_download.exe

    • Size

      1.5MB

    • MD5

      14490595e34b60d7e3e8253def68cb40

    • SHA1

      01c26f1c807c3ff09f7c57c5492c35484a6114e3

    • SHA256

      32029873dedd45ccc0a747683115737a48d44125896a07195dc0b3659bc41d0b

    • SHA512

      694a606df9968d03a587a949a8c92750fe902593db71e303badd980eb16a6cd62c0a7e3452d64d2a7689a648aca846b957571e3fd597f25ca8da9581b4b7c81d

    • SSDEEP

      24576:DfMrsZkunNXy0h0LHiFyjmgVxF5dNhdafRx04L1fJhUKuj9hQGFUL75WVGEE:bmunNXyriFwVNXzmb1/UKujBFuWTE

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral27behavioral28

    • Target

      help/controls.htm

    • Size

      4KB

    • MD5

      7cc1a293a0f16c0bdb1ed1b8be1b7d90

    • SHA1

      da10b6d92a51e551f3f5fafae8f65744b74140ef

    • SHA256

      7abfe76492743fbaac3af69e4e47e1165966c56131c708f98e3dbcc853fac41c

    • SHA512

      5a83baa14a1db3396f347da47257b2207ec3aacf68d4a713120d5de3de709025ec6f1149429a08426c7645d14fbeff349b8ce9dfe86f408dfdeb9f9bc17fc157

    • SSDEEP

      96:nhYA5wmaaPCCM/7MGi7oruFHz2da81GruFdVouh76v/Q5yN58105aYbyGAI3t:nhYAO7p6FHz2da/6FdVouh76v/Q5yx51

    Score
    3/10
    discovery
    behavioral29behavioral30

    • Target

      help/credits.htm

    • Size

      5KB

    • MD5

      27911be4cf525e2ac3ea0e5b7c6d6aa3

    • SHA1

      19f6e80da537b6924d40a0f7e973cb705217a739

    • SHA256

      e5ccae407e45ef85931f38e2585c6ae0d37c6ac7da7bd49aaee06d754511e068

    • SHA512

      e173ddacd9d0c0720e25dd6de75edcf9cd5545f98f37d83f53e5478993802233cc4b0416ba26a8afc3438d9bbc5b1ef41d0bcfbdda42970fd73dc3da42104541

    • SSDEEP

      96:/hYAKEmab1SCL/RlqUI9k6ZZ7KU7ps1ld5K9hIJGWnEZ/EeTduIEY0WmNV+iCMC4:/hYAlRPmZvE1W5acKb

    Score
    3/10
    discovery
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

upx
Score
7/10

behavioral1

discovery
Score
7/10

behavioral2

discovery
Score
7/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
7/10

behavioral16

discovery
Score
7/10

behavioral17

discovery
Score
7/10

behavioral18

discovery
Score
7/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discoveryupx
Score
7/10

behavioral24

discoveryupx
Score
7/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discoveryupx
Score
7/10

behavioral28

discoveryupx
Score
7/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10