Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

dad83e36be...18.exe

windows7-x64

7

dad83e36be...18.exe

windows10-2004-x64

7

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

HackerPro.exe

windows7-x64

3

HackerPro.exe

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dad83e36be9bf31109e84438b4cf9d0a_JaffaCakes118

  • Size

    1.3MB

  • Sample

    240911-vv1yystbkg

  • MD5

    dad83e36be9bf31109e84438b4cf9d0a

  • SHA1

    805d5f16a2377efc6067579faeee93a41e7f4da8

  • SHA256

    e00333f436ec9bfcd58a493f7111c44b893a3d1b85555d5a10a16330beacf730

  • SHA512

    7f746d446f5d5dbcf2cc41aaf7fb65b6abf9ce2dd3d76827b41ee275d17f18a927368fb3d91e1a528d5792e9858bbf570f4620ef078480eaa08242635e4106e3

  • SSDEEP

    24576:117IlVVRH+m6uQjx0laoUrPUAoz+nIPy9x+6idaQ//DYG2qPtmNnegXhyaF:f6V5+XuQjKlGrPLo8Ia9kbswYJstmluA

Score
7/10
discovery

Malware Config

Targets

    • Target

      dad83e36be9bf31109e84438b4cf9d0a_JaffaCakes118

    • Size

      1.3MB

    • MD5

      dad83e36be9bf31109e84438b4cf9d0a

    • SHA1

      805d5f16a2377efc6067579faeee93a41e7f4da8

    • SHA256

      e00333f436ec9bfcd58a493f7111c44b893a3d1b85555d5a10a16330beacf730

    • SHA512

      7f746d446f5d5dbcf2cc41aaf7fb65b6abf9ce2dd3d76827b41ee275d17f18a927368fb3d91e1a528d5792e9858bbf570f4620ef078480eaa08242635e4106e3

    • SSDEEP

      24576:117IlVVRH+m6uQjx0laoUrPUAoz+nIPy9x+6idaQ//DYG2qPtmNnegXhyaF:f6V5+XuQjKlGrPLo8Ia9kbswYJstmluA

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/StartMenu.dll

    • Size

      7KB

    • MD5

      a4173b381625f9f12aadb4e1cdaefdb8

    • SHA1

      cf1680c2bc970d5675adbf5e89292a97e6724713

    • SHA256

      7755ff2707ca19344d489a5acec02d9e310425fa6e100d2f13025761676b875b

    • SHA512

      fcac79d42862da6bdd3ecad9d887a975cdff2301a8322f321be58f754a26b27077b452faa4751bbd09cd3371b4afce65255fbbb443e2c93dd2cba0ba652f4a82

    • SSDEEP

      96:2fiqP7bO2qHkAC40KhvSE+6nrxtMn0iGd88qRLqtJ1tbRhElfRx2:siqP7OHX1Q4xtcf8qo/ttgfRx2

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      c10e04dd4ad4277d5adc951bb331c777

    • SHA1

      b1e30808198a3ae6d6d1cca62df8893dc2a7ad43

    • SHA256

      e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a

    • SHA512

      853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e

    • SSDEEP

      96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      HackerPro.exe

    • Size

      1.3MB

    • MD5

      b4daafb5ce234eff69b468a1621018a2

    • SHA1

      84bfc01fa1c512cbb20bf11a7de518202dd1326c

    • SHA256

      9659eecddb8fbf2f09c2a4b31922a601f0e4777947cb96d30381ca033b5832d8

    • SHA512

      456803d051e4f67654b2e06aefe2a277ca79f2dc49468c71041469f004b1a217ef5db7d3ff14f82649e0d001e81747840d1e2bc3fa6ad2cc36139cd770f9f06d

    • SSDEEP

      24576:504kGUuuEuEDsdj/oqDdAZ3RH1evl3WPGXVeDmK/cRgOnmq9g6EuTW:q4kRu4PdjoEi91YtUoVeBcOU7m6EgW

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      Uninstall.exe

    • Size

      64KB

    • MD5

      cfa78612e31dad11f97350e9c80b13fe

    • SHA1

      77b78820edcc30b09fb24c617e7a9e9d7a8cf244

    • SHA256

      7710b8889d3820c088187467c9853fd0049aef8747a0b18cde2e057bd0811d88

    • SHA512

      8b36eae41b8e695ef91270e14d2b1a349627857d980fade158294ab04bf11b43253221693e542340f7110e8e9b378ebe439d0c8962e3a549cfd1e0b2649f8f65

    • SSDEEP

      1536:UQpQ5EP0ijnRTXJcgM33S7GLeAyN/w04CYtz:UQIURTXJc7eANCIz

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral11behavioral12

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      c10e04dd4ad4277d5adc951bb331c777

    • SHA1

      b1e30808198a3ae6d6d1cca62df8893dc2a7ad43

    • SHA256

      e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a

    • SHA512

      853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e

    • SSDEEP

      96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420

    Score
    3/10
    discovery
    behavioral15behavioral16

MITRE ATT&CK Enterprise v15

Tasks