Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

Java反编...up.exe

windows7-x64

3

Java反编...up.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDIR/nsWeb.dll

windows7-x64

3

$PLUGINSDIR/nsWeb.dll

windows10-2004-x64

3

$TEMP/fzhjd/1.exe

windows7-x64

7

$TEMP/fzhjd/1.exe

windows10-2004-x64

7

$TEMP/fzhjd/qqbq.exe

windows7-x64

7

$TEMP/fzhjd/qqbq.exe

windows10-2004-x64

7

Configuration.exe

windows7-x64

3

Configuration.exe

windows10-2004-x64

3

JDecompiler.exe

windows7-x64

3

JDecompiler.exe

windows10-2004-x64

3

jad.exe

windows7-x64

3

jad.exe

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

�...��.url

windows7-x64

1

�...��.url

windows10-2004-x64

1

.rtf

windows7-x64

4

.rtf

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d37f18a2e2afdeb45c43d18343fc38f3_JaffaCakes118

  • Size

    531KB

  • Sample

    240908-em8e3avfnr

  • MD5

    d37f18a2e2afdeb45c43d18343fc38f3

  • SHA1

    d8cfd054e1a2261b3c28cb589b8d9a0c1bfcd85f

  • SHA256

    5271e8ec687c71a26214ccdba7c9ab1b60569bd5a3b56bfba8a6d5f1a6940dbd

  • SHA512

    35f363edf7c1f2e0b6aa589fd5e42867b930275e590251989f655cea6667d598e034738552cad6b7ff19de7373307bf57a261ee053ea226bb90b95cffa363ab3

  • SSDEEP

    12288:j8B1JiS7h7hub0zxdjBdqJyrb+a3XIn5jkdzUImvwL:YBTWStYJK3I5jkdd4wL

Score
7/10
adwarediscoverystealer

Malware Config

Targets

    • Target

      Java反编译 软件/JSetup.exe

    • Size

      534KB

    • MD5

      55004c58f2a56ffc87fb622ced8c2a0b

    • SHA1

      0cf880da57ae67a7ba6b0fa00a626e5a6f19a71c

    • SHA256

      f1b344c75b8385bcf5b884434de7b3d7f4e5b4526cf62727b5fee8e9cbe2bf7c

    • SHA512

      edff7ce4aa576ca709c430bf455bfafde0b1275931a5aa961e8750eec84c8f817bda4254d221816cea399768765c780a9994bfa6143b2067426c98be321249cd

    • SSDEEP

      12288:AdnRdg61QMGojHcLnHJX6lkrplz+MolBkSr:8nz5Q9oDqIEK1liSr

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      12KB

    • MD5

      43ba71f370a45aebcde86d76b83b208c

    • SHA1

      1f14e3c253a5b7255b617084b45e51ef9d6717e4

    • SHA256

      6d0a19614efb523f78477429df04b71459ee69b3d16231798dcfa539b3d2a64c

    • SHA512

      36aaf1ccb7c1085ba9fbacbad6c1505c9e389be5e9bd52ee7046b48302b8239d6e34dfeeb32a2708c4fb7d5a85c1d202fbdabcdd6a2cced0099249640443b551

    • SSDEEP

      384:0Klm7i+c3QW6ckPhyDEaLnz2bbBBIXwZ:hqi8BcyhEhL6bbTI

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/StartMenu.dll

    • Size

      6KB

    • MD5

      c0a60e2104eb0e4b0eac4eccdc048285

    • SHA1

      7b14600bb1e3120b5cf9aa6d5fd41a6f20f62e42

    • SHA256

      977c38bebc30b0b1de5338ab237ebfdfb7df87450f347d85fad28131f635c172

    • SHA512

      d7bf507c90145373acda753b14eacc89190c61d760ea30aafc864498d09475dfd0336266eab4d95fd53ce03d1e57aa772e3ede29dc67b2f060ed12116e5c5130

    • SSDEEP

      96:yLJdRZk8OkmE+WHw0FMXF6CWhFxKpKsaQhEfP0:yLjPk8OT30FFAHCP0

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsWeb.dll

    • Size

      8KB

    • MD5

      84bcf3c71e70d5a6e9dc07d70466bdc3

    • SHA1

      31603a1afc2d767a3392d363ff61533beaa25359

    • SHA256

      7d4da7469d00e98f863b78caece3f2b753e26d7ce0ca9916c0802c35d7d22bcf

    • SHA512

      61aefa3c22d2f66053f568a4cc3a5fc1cf9deb514213b550e5182edcecd88fadf0cb78e7a593e6d4b7261ed1238e7693f1d38170c84a68baf4943c3b9584d48e

    • SSDEEP

      96:9E1ZgHfHizBkiz1zCuNrwXTP8Jx/N6SCMeNV37bnwXwPML/bUdut5tCsPb2N6nOc:9E1ZkGdbiSCMeNN7LwAY/gd+Oc

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $TEMP/fzhjd/1.exe

    • Size

      265KB

    • MD5

      06638c30eb899390f4ceec295112c454

    • SHA1

      3727f286cb1738d6b3006f63bdce0844d0883e6c

    • SHA256

      1ad42831c0fe590dc36ca89933781e1771637d19dea98968dfaf77a9e18a7b21

    • SHA512

      57795604d79cff4468d396b23de5a75bbd5b1dbbda0b67a270a151c717c26ec70534650e6fa12e18fe23f623b52c8eb143cc223b431a5245e7c509f53cc272fe

    • SSDEEP

      6144:2u3dwQ0I2aFB2u0K/NAixgmMvYkuvPssyDn:nN9FQuX/9xgHvf0ssyr

    Score
    7/10
    adwarediscoverystealer

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral10behavioral9

    • Target

      $TEMP/fzhjd/qqbq.exe

    • Size

      48KB

    • MD5

      5621b2732fc65b8d8db2c7dc5ef6c40c

    • SHA1

      b991d38f0414b7f27c8f6de3eb498ba6876068e8

    • SHA256

      bd911431bd69f8a09b08c587ccc9c94b3c1bc376506613f822880ac9adffe13a

    • SHA512

      d57a3e0e5b14dd1e4e8384cc31336e8179c73fc17fcf07bf03680b7bce13c160ee0d3d61a7db74f75c7c6fa69fa215a778816e04468366c56d6f87ec706e230f

    • SSDEEP

      768:84PgXuTkSBmVeRP+z2wYfxG7lWHE/nUF2kLpcqSFuHtLHkJI629a0gtKbAeavjwo:fPgXwpm4RmzZwCnUF2ICqdkJI6rlndP

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral11behavioral12

    • Target

      Configuration.exe

    • Size

      92KB

    • MD5

      8d987ab8dc50678f5bbde25a68020830

    • SHA1

      49df3c98d460d3695f68f2bfbc3e1e6266606cce

    • SHA256

      edac84e4ae784749ee262229b5fab2cc8134c756d8b131586a69b73a50574eeb

    • SHA512

      a8cfd73f9c893c802537ec5a7912726c9acce8836dff73689ee66e3751564bbea9e4755f7bdd266a0bd0b4e347239042f9c13f8a4c783d1321090576ac1701c4

    • SSDEEP

      1536:ZVt39EaLU3EJTzQwDkWHVDlUEY0sZ+CTOXaQWt1YVWdVq:bLzTzQwNHVxG0sZiWt1R3q

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      JDecompiler.exe

    • Size

      60KB

    • MD5

      81911d5647386050d62afb3c33d00220

    • SHA1

      c23dd34202410ca95028fab4e8a57c2e055296e6

    • SHA256

      e1223b67d25c0e06206949f00058a7cdc721303cf7e06f0eb6c12c27eca95f21

    • SHA512

      d70e968e9b5b4dd58093c647a5a0d0d27a23aa9156566048b5cf002b561f91b9ac90ba29fdc886f244bc9a48620e2f910f5d7126b09a0fea92b5f562bedee4f2

    • SSDEEP

      768:saFvPKBnIqpcM5Msz9b+jWTOPuGaQWixJyuB3UYVqtMGV4+1aL:s4OGsZ+CTOXaQWt1YVWdV+

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      jad.exe

    • Size

      435KB

    • MD5

      211ac1a4d21adbe634cb7e44adc3e5c8

    • SHA1

      d76c7b5a10649cba2b6a44eae2f2100a72a3ebd3

    • SHA256

      bcb7c5beba3476d0f650ddac9ee4516ac38d150a5ab01c87906dac8b1c0adeda

    • SHA512

      2fdbe1d4dc92af0ce8d50e71508848886097182f90b25e45c8b34a8356c6f7af1a60194a17fd173d88d48a6b2d8fd7aa7296915ede8855bb2b121ee06aeb68be

    • SSDEEP

      6144:kXCxce5kJOZ7S9sLZLRYnjJ0nIQgyK5jZwJUFIYVWJJFSb5TOolOHDJV2fwdiMaD:KCxzqutLgKKygqI5TOolOjJ

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      uninst.exe

    • Size

      32KB

    • MD5

      4aa2fa9cdb6e1fdc1ecb84c9dfbb3228

    • SHA1

      103f1886c5dda222b50e548887131699804d8118

    • SHA256

      2a60367d426fffc96060afd78d3d3bead370609f97ed44ff4e71abf5307ef9be

    • SHA512

      a051320c4b763990a23ee437c8dd61936841fa610b9bd2e40cca552865a0b3aa803727ce30273707fc9b68648895355c5fc4dc493918968ac7f6a5582ee4a6f5

    • SSDEEP

      768:D/DsaGV4M8SnjRk/dP4QY4Y/TdmJcVgBT+LERPAxVUqr:DLsaGuglum/TdW4tLERPAxVT

    Score
    7/10
    discovery

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral19behavioral20

    • Target

      .url

    • Size

      55B

    • MD5

      228e258e694db7afae2546f9c21e50b7

    • SHA1

      dd31552b0b48e8be1f21bdbf419e3ac6d1f72497

    • SHA256

      c1e1588168de8f45d698eb22efaef600aedd66da4625805805889cb338b7df43

    • SHA512

      af78104e478821cb09a5c2cb9f7efcf0668a5f9718f0b0e60cddb8b42bfa06aee25961ca752bc16b2110eaf8d98956e3535affe941d32c257ed4ebe3b3fd10b9

    Score
    1/10
    behavioral21behavioral22

    • Target

      .rtf

    • Size

      27KB

    • MD5

      c7736898053907366b4ced5299198325

    • SHA1

      adbb73abe177cada5e511b0b6921b7bd1a634170

    • SHA256

      84426d0da029d70e2e503dc2c6ef1d092d5293e60504443b6f896dcc349bcbd6

    • SHA512

      e559fe82cdb84e4f25f592b505aa373490e380d4674c173381b360eb2942e17ef8ac8c66b20f484767c340169a5e0efdfa5fd4a2863786d6418bda3526e1289b

    • SSDEEP

      192:ZsQlCQ32AB93ryt0N/yPfyZQ/oi+Y7F5ztvqlpGWuRXg4tmN:ZsQcQ3GWKTt0QhXgKmN

    Score
    4/10
    discovery
    behavioral23behavioral24

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

discovery
Score
3/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

adwarediscoverystealer
Score
7/10

behavioral10

adwarediscoverystealer
Score
7/10

behavioral11

discovery
Score
7/10

behavioral12

discovery
Score
7/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
7/10

behavioral20

discovery
Score
7/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

discovery
Score
4/10

behavioral24

Score
1/10