Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

d16f1c4285...18.exe

windows7-x64

7

d16f1c4285...18.exe

windows10-2004-x64

7

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$TEMP/PlayMYDVD.exe

windows7-x64

3

$TEMP/PlayMYDVD.exe

windows10-2004-x64

7

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d16f1c428531f29b78f171ba28540ce5_JaffaCakes118

  • Size

    168KB

  • Sample

    240907-jqrzpstcja

  • MD5

    d16f1c428531f29b78f171ba28540ce5

  • SHA1

    325e7ca948df718456b400537818275385f62eb4

  • SHA256

    6767f33dd2c515e664a51b0d2df91f9c7f46b3c35c362949603ed3a3b9fa7f10

  • SHA512

    f68fc0c83a509b312629c71696ce8bfd3e7fb9311e76e2e826f77b699bbd1029888f29ee40367b717d0e971aadafd01161ac4f6d40995ea850be25b9dc93dc5c

  • SSDEEP

    3072:9TvfTzcTsw6R9gB3qGRIuvwCQ4Mh/FDLfr/oQ0pQB+PfaT6Pc:JvfTwQwDqGz44S/xLfrABpQB+U5

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      d16f1c428531f29b78f171ba28540ce5_JaffaCakes118

    • Size

      168KB

    • MD5

      d16f1c428531f29b78f171ba28540ce5

    • SHA1

      325e7ca948df718456b400537818275385f62eb4

    • SHA256

      6767f33dd2c515e664a51b0d2df91f9c7f46b3c35c362949603ed3a3b9fa7f10

    • SHA512

      f68fc0c83a509b312629c71696ce8bfd3e7fb9311e76e2e826f77b699bbd1029888f29ee40367b717d0e971aadafd01161ac4f6d40995ea850be25b9dc93dc5c

    • SSDEEP

      3072:9TvfTzcTsw6R9gB3qGRIuvwCQ4Mh/FDLfr/oQ0pQB+PfaT6Pc:JvfTwQwDqGz44S/xLfrABpQB+U5

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/StartMenu.dll

    • Size

      9KB

    • MD5

      0a58a89b32428fb848099f33e814e3ed

    • SHA1

      661b73c3ff3579eb9d0c482af7354ee0461634a9

    • SHA256

      aba4f462067f8c872d84c4c1ad6eaccf8bb6546c67c011964f8d2b62170f8236

    • SHA512

      1f4efa7183670f9e9bcf1be56b3165393a97da29080bf1353358933f0f2e0544706982059a9408639782163f4f05bc9d38fca9be110f7d3058f2b0e0017e8dc5

    • SSDEEP

      96:Y0uUUpZMb4pkXuzaVS1pZkrDSgPKqjOYiktlcyFBtsxwwAICZ:ipZS+zac+KdqjOYRcoB6xkICZ

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $TEMP/PlayMYDVD.exe

    • Size

      99KB

    • MD5

      7a2410800053b1cfe14977bca3f61776

    • SHA1

      7c8a206df5e451900b3fd76395ebd0572d7e62a1

    • SHA256

      62fd751a38f08963862d3a37cc9598949ba6fff8c4fb9da64c0f2a45bb163704

    • SHA512

      c26e06d7551829c85c074d6704f90543e8c32b122b0d17e46bcf0a242e02f47025f2f9e80e089497730767c5253464b4e374090188783fb7a5730e3f271492a9

    • SSDEEP

      3072:Oe55xzUF4oNzCogqxdwiacjy9nF5YKiUXRq7:b7xUFbWiyZ/h

    Score
    7/10
    discoveryspywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral5behavioral6

    • Target

      Uninstall.exe

    • Size

      66KB

    • MD5

      a9288e973ae497c007fbe2d38a0d7482

    • SHA1

      2dde89cea40b642cac36663c4269dcca5b7bf66f

    • SHA256

      4d79f805439bb0d4ac2c610d017703d52a186291df2a0c85461b0d23a311b29a

    • SHA512

      37461c737225ee91fa9e7377ab1fa9f1bef20cf3eb7dd18b57db2b01ac0806cc89e1b92e68d9881455285a6933422fed21eaf040ff6491ff02aafa4b6f1c6154

    • SSDEEP

      1536:97ANUHtHV6AWzwfFJUPfT4t3kUYp+djPw6RqRigBJbczgs:9TvfTzcTsw6R9gBbs

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks