Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

e1b117672e...18.exe

windows7-x64

7

e1b117672e...18.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...ps.dll

windows7-x64

3

$PLUGINSDI...ps.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1b117672e8cb016d83ce59af1fb41ab_JaffaCakes118

  • Size

    694KB

  • Sample

    240915-ey6qlswann

  • MD5

    e1b117672e8cb016d83ce59af1fb41ab

  • SHA1

    43ca5234f78b0ce50add4c42592c399d1c544cde

  • SHA256

    1565d70aac236b310ae71f82d129192f44a881af1d21fbd8be597c10d27cb00e

  • SHA512

    57864689d8ba5e86806193e1ed3ba41016fc4bd6010e66b8309e8609f031c8855ddef0987d938efc4c15f48e42f52fcdd0e4e1a714839e210c784cbeacda7301

  • SSDEEP

    12288:9JE2gGMyEOutTNuuwTXnpnuR+mCUV08MODPOslqxY0W40lr4aYEHfPcBSACVcfcR:9JcG05HwbpuARODPONxgLvHfOSFVx86d

Score
7/10
discovery

Malware Config

Targets

    • Target

      e1b117672e8cb016d83ce59af1fb41ab_JaffaCakes118

    • Size

      694KB

    • MD5

      e1b117672e8cb016d83ce59af1fb41ab

    • SHA1

      43ca5234f78b0ce50add4c42592c399d1c544cde

    • SHA256

      1565d70aac236b310ae71f82d129192f44a881af1d21fbd8be597c10d27cb00e

    • SHA512

      57864689d8ba5e86806193e1ed3ba41016fc4bd6010e66b8309e8609f031c8855ddef0987d938efc4c15f48e42f52fcdd0e4e1a714839e210c784cbeacda7301

    • SSDEEP

      12288:9JE2gGMyEOutTNuuwTXnpnuR+mCUV08MODPOslqxY0W40lr4aYEHfPcBSACVcfcR:9JcG05HwbpuARODPONxgLvHfOSFVx86d

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/ZipDLL.dll

    • Size

      163KB

    • MD5

      2dc35ddcabcb2b24919b9afae4ec3091

    • SHA1

      9eeed33c3abc656353a7ebd1c66af38cccadd939

    • SHA256

      6bbeb39747f1526752980d4dbec2fe2c7347f3cc983a79c92561b92fe472e7a1

    • SHA512

      0ccac336924f684da1f73db2dd230a0c932c5b4115ae1fa0e708b9db5e39d2a07dc54dac8d95881a42069cbb2c2886e880cdad715deda83c0de38757a0f6a901

    • SSDEEP

      3072:8CkSJJ30k1pn2T4ISnUGN+E8KnCOxA17jxLmRtWHyPDQFllOdJiSg:tkSJy+c30UxbKnA1hLKWSVdk

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/qldzcps.dll

    • Size

      166KB

    • MD5

      33a8c9e4a0623f14b05ae092b627d1dd

    • SHA1

      8a6d2772fd5db671e4c660633c4c1e14ce0b1e98

    • SHA256

      e712308425b7bd263be556daeb4884c9b35e65df562e4a75a1a37751e715abb7

    • SHA512

      d373796a254cbfeeb8701755ea44dfe37140657ad01117cd2a44e4dd358e662b752a75287243cd1eb162e4af3a4e05220ba25b609f0308da6e2cf839e979dc45

    • SSDEEP

      3072:GjGiFSLguquY8/qoNNdGikFdfwJv9+tJ9sfYMaq3poX:mGiFSD02NYdfwJFeZUpoX

    Score
    3/10
    discovery
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks