Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

d202bce77d...18.exe

windows7-x64

3

d202bce77d...18.exe

windows10-2004-x64

3

$PLUGINSDI...64.dll

windows7-x64

3

$PLUGINSDI...64.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...ew.dll

windows7-x64

3

$PLUGINSDI...ew.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$SMSTARTUP...��.exe

windows7-x64

3

$SMSTARTUP...��.exe

windows10-2004-x64

3

$TEMP/Kuai...te.exe

windows7-x64

7

$TEMP/Kuai...te.exe

windows10-2004-x64

7

$PLUGINSDI...64.dll

windows7-x64

3

$PLUGINSDI...64.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$TEMP/Kuai...te.exe

windows7-x64

7

$TEMP/Kuai...te.exe

windows10-2004-x64

7

$PLUGINSDI...64.dll

windows7-x64

3

$PLUGINSDI...64.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d202bce77d5e2046cd866674a253d26f_JaffaCakes118

  • Size

    5.6MB

  • Sample

    240907-qfepyswbqr

  • MD5

    d202bce77d5e2046cd866674a253d26f

  • SHA1

    526a3ae81867b8f49e39aeceb32e96b90b08978b

  • SHA256

    ca5cdb12d7446accecbcf99edc804f3b538cb96f0bedf407415cc5aaba7bb165

  • SHA512

    57e1bf271aded004343956860dcc9639f667793aaf76e673f39d00bda7aa8846a32319fec719130d63161d26467b947cde54e5daf6f7894021935d24af2f2530

  • SSDEEP

    98304:k/WmueH7WNwf4XhK32THmY4WDaXF8wOHkxPIccTPeJcycbMxhvTYsK+FO:k/IebWKwXDmYpawExPCyHhrHKgO

Score
7/10
discovery

Malware Config

Targets

    • Target

      d202bce77d5e2046cd866674a253d26f_JaffaCakes118

    • Size

      5.6MB

    • MD5

      d202bce77d5e2046cd866674a253d26f

    • SHA1

      526a3ae81867b8f49e39aeceb32e96b90b08978b

    • SHA256

      ca5cdb12d7446accecbcf99edc804f3b538cb96f0bedf407415cc5aaba7bb165

    • SHA512

      57e1bf271aded004343956860dcc9639f667793aaf76e673f39d00bda7aa8846a32319fec719130d63161d26467b947cde54e5daf6f7894021935d24af2f2530

    • SSDEEP

      98304:k/WmueH7WNwf4XhK32THmY4WDaXF8wOHkxPIccTPeJcycbMxhvTYsK+FO:k/IebWKwXDmYpawExPCyHhrHKgO

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/Base64.dll

    • Size

      32KB

    • MD5

      fb6ffa30b708e9413d71a2c95558d0f1

    • SHA1

      a4a67a7b6c53e47f9a741e06c701e03382dc548f

    • SHA256

      3ae1c3fbf851e0de9865191b00b5fc26be32eb4f2ccb81b47e1488c2805402ae

    • SHA512

      b1e4e9e263add6c6d9f7309d739375725f7c4afd645caebea903f7b8963c0ac8d2728dee3edd999f8496b100ba8bd5fd7e5c3c4c17ca0bbcd24923c0cb270415

    • SSDEEP

      384:zFE2o6I2uTFKX342X5xzumltM//yaGPzUo7o5F8:zFES1uTE4W7zwmPzt7o5F8

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      12KB

    • MD5

      1d5c649dde35003a618b9679d5d71b92

    • SHA1

      0409bbab3ab34f8c01289cdd847b4d1a32d05b18

    • SHA256

      0f4d3cee24e3f310fa804983c931d3628613988a24f0be7854f63a9309b8e45f

    • SHA512

      b432ebcc52905662d61a3f17e08e209a3f9d836a9071b3b5e80070af7ebcf34cf66c44426dda041c2a258fda4787e5692e2b35acbcd73288fb84fe3c977bbfd9

    • SSDEEP

      384:pKlm7i+c3QW6ckPhyDEaLnA2bbBBIXwZ:8qi8BcyhEhLBbbTI

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      32KB

    • MD5

      83142eac84475f4ca889c73f10d9c179

    • SHA1

      dbe43c0de8ef881466bd74861b2e5b17598b5ce8

    • SHA256

      ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729

    • SHA512

      1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1

    • SSDEEP

      384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/KuWoNsis_new.dll

    • Size

      101KB

    • MD5

      5b7d3fc9651089f373df83a9bdc922a7

    • SHA1

      e0ee059b261e89bef6bdc9392ea4a579686a410f

    • SHA256

      cb1e6695c6d55c3bd4b8d12cbe6a2e48687e72c84223256a3431560b2d4d7e59

    • SHA512

      5feaf4de80e9057c9b3fc2d5ef2a5b7ef857fa7de67e5e5aa56915d06cd42b8544a8e707140bf182ad4907fc51a022fa597316f27e481abe170ba2548d64f911

    • SSDEEP

      1536:D3h2lAZyQr64O173t81vfTvkrkuV4OclyTJafC1:Lh2l0yG6Z3O13y4OcluUC

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      4eff5fafd746f5decb93a44e3a3d570c

    • SHA1

      a11aa7681b7e2df1c7f7492a127d332d1495ea8a

    • SHA256

      cf61ddd15d63c25a12caee70f51ea736cfc02195c42e56ee01b33f689d3754c5

    • SHA512

      cde82d2a1f28506e4c2264f6b82017a00af32f138ebcdbaf4cc58463870fa626f708aa57465294c5a6f096c886841e7b9112b85bf3ea2f1d8f2da816b51b2d72

    • SSDEEP

      192:0OycJo/rJVCmIDNLU0dq5RD00lspbub76yL:6/QQ0d0RD0USq/6y

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      18KB

    • MD5

      94a8ace2be90a687c1b1729c32c66e50

    • SHA1

      94cff89cc170c00b1f849460f78cb12ab8730538

    • SHA256

      1a6c160fd844dea35195371476119f91eab302d701b0f6f1c3fe87ad92cc93df

    • SHA512

      ba23dfa7a29450451ac3f6ef6bf9e89352e1d17f7a2b7c7e5a87839becd6676542d2189d443322b3cad08b1bcac8851eebf9964fa37190e551f0bd717dcc5deb

    • SSDEEP

      384:jlkcI7HjShsRSSMxCkRimJrr7Jsc8Xtya9zT0Ac9khYLMkIX0+GiBgAqkF:jEjVQRjRiml5vSQa9zSm

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      $SMSTARTUP/ֺ.exe

    • Size

      102KB

    • MD5

      572fc6f9ce7c6afb32ce8d92192f999f

    • SHA1

      ac2200d221b6be271d0c66c7ba41da7d1b264fcf

    • SHA256

      2932b4a0f8f35ce23005fea434ccc5d309dc373d0f2b26ebc7ed76ff91852417

    • SHA512

      77aba85163d82f6178ce3d8d1a5ac5d29903e296811fa182ed0dd9cdc3347c7e7e58bad5f57a4c7623a2684f6b3ce4eddfc5891151eb75df46aa1c7a78bd5291

    • SSDEEP

      1536:vEIBeTPbC7junyIh3aZiLj0CkTDFx53LlOH8wixbZeC0HP+p/afCD:sLPmjuPO/x53LlE0xbZeCK+pyI

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      $TEMP/KuaiWan_Update/KuaiwanUpdate.exe

    • Size

      70KB

    • MD5

      8b2fb19cfb18197fb55b3f21d58f2edb

    • SHA1

      2af21e2d58e67075df24736789104a057692e1e8

    • SHA256

      0787371e1a258899470a7d547d26e2856444e7e9158d8c96d65613145ffb80f4

    • SHA512

      9c7c456597d67c90ca8aea5b6f4f807e386dd5dc5da34c84a1a6a64c33f11d81f32407d74ecc78315165c5c36a66b6f264f44f19abad4a7446a648bd3288696e

    • SSDEEP

      1536:IZFwlrRfoowfoMTIxpIplqu4VGPJB6phruR/DZhbDfO9alVZ/afC2:IZGlFw7fonu4sPJB098/DjxT49

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral17behavioral18

    • Target

      $PLUGINSDIR/Base64.dll

    • Size

      32KB

    • MD5

      fb6ffa30b708e9413d71a2c95558d0f1

    • SHA1

      a4a67a7b6c53e47f9a741e06c701e03382dc548f

    • SHA256

      3ae1c3fbf851e0de9865191b00b5fc26be32eb4f2ccb81b47e1488c2805402ae

    • SHA512

      b1e4e9e263add6c6d9f7309d739375725f7c4afd645caebea903f7b8963c0ac8d2728dee3edd999f8496b100ba8bd5fd7e5c3c4c17ca0bbcd24923c0cb270415

    • SSDEEP

      384:zFE2o6I2uTFKX342X5xzumltM//yaGPzUo7o5F8:zFES1uTE4W7zwmPzt7o5F8

    Score
    3/10
    discovery
    behavioral19behavioral20

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      4eff5fafd746f5decb93a44e3a3d570c

    • SHA1

      a11aa7681b7e2df1c7f7492a127d332d1495ea8a

    • SHA256

      cf61ddd15d63c25a12caee70f51ea736cfc02195c42e56ee01b33f689d3754c5

    • SHA512

      cde82d2a1f28506e4c2264f6b82017a00af32f138ebcdbaf4cc58463870fa626f708aa57465294c5a6f096c886841e7b9112b85bf3ea2f1d8f2da816b51b2d72

    • SSDEEP

      192:0OycJo/rJVCmIDNLU0dq5RD00lspbub76yL:6/QQ0d0RD0USq/6y

    Score
    3/10
    discovery
    behavioral21behavioral22

    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      18KB

    • MD5

      94a8ace2be90a687c1b1729c32c66e50

    • SHA1

      94cff89cc170c00b1f849460f78cb12ab8730538

    • SHA256

      1a6c160fd844dea35195371476119f91eab302d701b0f6f1c3fe87ad92cc93df

    • SHA512

      ba23dfa7a29450451ac3f6ef6bf9e89352e1d17f7a2b7c7e5a87839becd6676542d2189d443322b3cad08b1bcac8851eebf9964fa37190e551f0bd717dcc5deb

    • SSDEEP

      384:jlkcI7HjShsRSSMxCkRimJrr7Jsc8Xtya9zT0Ac9khYLMkIX0+GiBgAqkF:jEjVQRjRiml5vSQa9zSm

    Score
    3/10
    discovery
    behavioral23behavioral24

    • Target

      $TEMP/KuaiWan_Update/PPSUpdate.exe

    • Size

      70KB

    • MD5

      a2dcbc0d8280712e08a7e3ffc09e5f0f

    • SHA1

      23030a02a7bfabc1d805c2bc29a164b22116b66f

    • SHA256

      283fcffef2618d09604ffa7c3bdd7fffa34dc82b998121981cea2d69e2af0326

    • SHA512

      da60697f6914f56576898f13f84b344fa6f49a6985862bcd0370168c8db931829b9a6a79ecc56d84e1d3a4675eb9096db948fece2b5f1c5764cfe599e7465cf5

    • SSDEEP

      1536:UZFwlrRfoowfoMTIxpIplqu4VGPJB6pQuyLv+wTqfczImH9oTafCZ:UZGlFw7fonu4sPJB0Qhv+wGczb9b6

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral25behavioral26

    • Target

      $PLUGINSDIR/Base64.dll

    • Size

      32KB

    • MD5

      fb6ffa30b708e9413d71a2c95558d0f1

    • SHA1

      a4a67a7b6c53e47f9a741e06c701e03382dc548f

    • SHA256

      3ae1c3fbf851e0de9865191b00b5fc26be32eb4f2ccb81b47e1488c2805402ae

    • SHA512

      b1e4e9e263add6c6d9f7309d739375725f7c4afd645caebea903f7b8963c0ac8d2728dee3edd999f8496b100ba8bd5fd7e5c3c4c17ca0bbcd24923c0cb270415

    • SSDEEP

      384:zFE2o6I2uTFKX342X5xzumltM//yaGPzUo7o5F8:zFES1uTE4W7zwmPzt7o5F8

    Score
    3/10
    discovery
    behavioral27behavioral28

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      4eff5fafd746f5decb93a44e3a3d570c

    • SHA1

      a11aa7681b7e2df1c7f7492a127d332d1495ea8a

    • SHA256

      cf61ddd15d63c25a12caee70f51ea736cfc02195c42e56ee01b33f689d3754c5

    • SHA512

      cde82d2a1f28506e4c2264f6b82017a00af32f138ebcdbaf4cc58463870fa626f708aa57465294c5a6f096c886841e7b9112b85bf3ea2f1d8f2da816b51b2d72

    • SSDEEP

      192:0OycJo/rJVCmIDNLU0dq5RD00lspbub76yL:6/QQ0d0RD0USq/6y

    Score
    3/10
    discovery
    behavioral29behavioral30

    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      18KB

    • MD5

      94a8ace2be90a687c1b1729c32c66e50

    • SHA1

      94cff89cc170c00b1f849460f78cb12ab8730538

    • SHA256

      1a6c160fd844dea35195371476119f91eab302d701b0f6f1c3fe87ad92cc93df

    • SHA512

      ba23dfa7a29450451ac3f6ef6bf9e89352e1d17f7a2b7c7e5a87839becd6676542d2189d443322b3cad08b1bcac8851eebf9964fa37190e551f0bd717dcc5deb

    • SSDEEP

      384:jlkcI7HjShsRSSMxCkRimJrr7Jsc8Xtya9zT0Ac9khYLMkIX0+GiBgAqkF:jEjVQRjRiml5vSQa9zSm

    Score
    3/10
    discovery
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

discovery
Score
3/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
7/10

behavioral18

discovery
Score
7/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
7/10

behavioral26

discovery
Score
7/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10