Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

ef4d5740e0...18.exe

windows7-x64

7

ef4d5740e0...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$TEMP/spltmp.exe

windows7-x64

1

$TEMP/spltmp.exe

windows10-2004-x64

3

Mwic_32.dll

windows7-x64

3

Mwic_32.dll

windows10-2004-x64

3

POS58/pos5...DD.dll

windows7-x64

3

POS58/pos5...DD.dll

windows10-2004-x64

3

POS58/pos5...UI.dll

windows7-x64

3

POS58/pos5...UI.dll

windows10-2004-x64

3

POS58/pos5...58.dll

windows7-x64

3

POS58/pos5...58.dll

windows10-2004-x64

3

POS58/pos5...OR.dll

windows7-x64

1

POS58/pos5...OR.dll

windows10-2004-x64

1

POS58/pos5...IB.dll

windows7-x64

1

POS58/pos5...IB.dll

windows10-2004-x64

1

POS58/pos5...RV.dll

windows7-x64

1

POS58/pos5...RV.dll

windows10-2004-x64

1

RWic.dll

windows7-x64

3

RWic.dll

windows10-2004-x64

3

mpok.exe

windows7-x64

5

mpok.exe

windows10-2004-x64

5

readme.htm

windows7-x64

3

readme.htm

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef4d5740e0152c792d763c4053d4e861_JaffaCakes118

  • Size

    3.5MB

  • Sample

    240921-h3bb2s1app

  • MD5

    ef4d5740e0152c792d763c4053d4e861

  • SHA1

    7287802b40e87e93e444cc72d6e4857454ac503b

  • SHA256

    4c6fa8e3c0514082d364d995f157d5f4b3d9f2339aed47006eae23fe3025f530

  • SHA512

    d79f1c9ad2216f67b930a1c36f9d306fa29c98abeb13dd8f5999cc31bae839ed1153d9161a9eb18211361af613c4e585e604243735fe342ce9ddca912de9fd0a

  • SSDEEP

    49152:fpJqZcTjVVZJRjDhQzfTKbf1uR/L3eiFD0ENV9JZ5QLX5qoEFZpA1yVL:fnqE1h6bKgR/ztz98pqoEFvayVL

Score
7/10
discovery

Malware Config

Targets

    • Target

      ef4d5740e0152c792d763c4053d4e861_JaffaCakes118

    • Size

      3.5MB

    • MD5

      ef4d5740e0152c792d763c4053d4e861

    • SHA1

      7287802b40e87e93e444cc72d6e4857454ac503b

    • SHA256

      4c6fa8e3c0514082d364d995f157d5f4b3d9f2339aed47006eae23fe3025f530

    • SHA512

      d79f1c9ad2216f67b930a1c36f9d306fa29c98abeb13dd8f5999cc31bae839ed1153d9161a9eb18211361af613c4e585e604243735fe342ce9ddca912de9fd0a

    • SSDEEP

      49152:fpJqZcTjVVZJRjDhQzfTKbf1uR/L3eiFD0ENV9JZ5QLX5qoEFZpA1yVL:fnqE1h6bKgR/ztz98pqoEFvayVL

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      12KB

    • MD5

      4c7d97d0786ff08b20d0e8315b5fc3cb

    • SHA1

      bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c

    • SHA256

      75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84

    • SHA512

      f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a

    • SSDEEP

      192:6KdqJ4Bhf1mdCMI26t510swClJOeFIsm7F1QuPs:6KdE4zAddwR0swqOeFxu

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $TEMP/spltmp.exe

    • Size

      3KB

    • MD5

      4309709918dfd62cb3688b21bd5da293

    • SHA1

      c568d498b5421128d99caaa7f5626e79e624f540

    • SHA256

      3878d20e425de5cb7765b6a65869253ba96932e7d0d29e39e4bb2b20eb13fcb7

    • SHA512

      7571f3d1b454100c8a2081cd1c2d15764aedfe131256df12dee47da602af9b09d2ba717572502a450f2dd9940ffad4610effebd46816a856c49d72117a752962

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      Mwic_32.dll

    • Size

      172KB

    • MD5

      8cec16f685a11d0bc4df581fa75a957d

    • SHA1

      d404b5d4ae873ef82d107dc47e809dea05e15d58

    • SHA256

      0e811f22887ad9eda7ea2370c02fa32e71116c86ee7d408ffa3a3f68da0a2471

    • SHA512

      423b052b4f993806b90b5d412beadbc07dc1f2fec5bb71e7301df2eb0a02f9572cdf6dac479af4df2458fa78afbd7b02e8148e22e6f0de59fd21b668489b4908

    • SSDEEP

      3072:f7qs0DOV8MTId5gD50FfEWTwAw9cJ/pDonpk:Dqs0DOV8To0fEW0/9cJ/Ok

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      POS58/pos58_2000_xp/I386/RASDD.DLL

    • Size

      425KB

    • MD5

      d187053be3d5afe38b14bd80e1284997

    • SHA1

      b765496c4cedb7d0fec79cdc73da130dccfa6313

    • SHA256

      e0709dd910e84b38ce11ee141f1e21061eb48484a8356c4b012f3f5572fe40d8

    • SHA512

      f98100eb114789f4397126fb9cd3e98fecfe68cad981a88640447a71dfa2133514e15d2d8e6f480d251654b4fc0507a6b5d4af7e3bb48f4717b42491b042230d

    • SSDEEP

      12288:f0ortbP0Hd3EnD5IBaqGE2z4UYksDWVcToX:MortT+d3EnNIKt4UIqcTo

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      POS58/pos58_2000_xp/I386/RASDDUI.DLL

    • Size

      80KB

    • MD5

      cf88e3e16b1b96a91b8ce807045665d8

    • SHA1

      c5d5c9b950f36360755adf6484f9888c7f156b56

    • SHA256

      fd8653846fa5587c6aca6ca00357d8a0ff2d711d74cc8129540a552557b14219

    • SHA512

      6f0f4e5820b8e0b76582dbe4fc6c1914e39a83939150f3dee7ab45454aaf9f6a2af403a817f0ee1a67db30a4e212ede3efec31fd9b9d3b4c3f029e4b8e0003f2

    • SSDEEP

      1536:KRJb5V4cHz98X3md6qdhtVZW7vOki608MbNjcKfCgpJwiKupY+aLSfMy959g1LY:c3V9VThzkndM60wibY3Uw

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      POS58/pos58_2000_xp/POS58.DLL

    • Size

      20KB

    • MD5

      2dfaafa80d8c6a7b26050186d1a5ec2d

    • SHA1

      8dafce2a55563a094eb90aae2ddb555995980aa7

    • SHA256

      5a0e9c04809ec6a26cbc2c1bb62a04300d650442ea3014d2a755379269c00893

    • SHA512

      4603ccad20756cb78dee904472c9475d4fed05e3002c4764510c59d1ed053f897725596cb7f332e199f5e4346a6b6f550ca93bd192ada13ee464e8ce8113cce6

    • SSDEEP

      192:jhoYWS4Wx7IR8oDVYiU1UqwUqTj4O7UlfMrEfgcgBlFqpk7jVZqbdu8kHUfHwGs9:jhnWS4Wx7YDgPqTsOwZYo67BmTsZnVK0

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      POS58/pos58_win98/DMCOLOR.DLL

    • Size

      17KB

    • MD5

      a4325003c6cb7b4632654c4b8950ce4a

    • SHA1

      f13e9afcc9d1d8592f26ca08c14924c7220f9bc7

    • SHA256

      1de3922cb0c94a73d83ce47c2b873ce5b9028428b38ebc9a392411b82d37a469

    • SHA512

      f51d34330218810e660da2528c7afe7ffeee718d09af7e3491ee9c6180b079056c4458517d5d4d9f7d6ef180d64de10db8269fbc5e969a647acf1f4e3f08bbd2

    • SSDEEP

      384:HA6qa+InnSt61TR3PonbfJ4E0PGm/8jShGCmF0p8vD2huCQ5dhF06K1t:Hvq8nx1TR3EmEClhGCm6avD2hHQvhZK

    Score
    1/10
    behavioral15behavioral16

    • Target

      POS58/pos58_win98/ICONLIB.DLL

    • Size

      118KB

    • MD5

      ed70efd441caa9f6ad185f4c15e490f4

    • SHA1

      f26dfde70f3987f175d18851877cfb38dfed74dd

    • SHA256

      a2451d2ee6636076705d272d311dda7978008d53f9941accb99a7fc1a976c3b6

    • SHA512

      cd7f5d9a7c0a3aa998cfab8292a57fb0e517f4d2998d5c7ef36c0f93d561abbc47c0395b1d0927e4f014b95b76eb91deed6a622cf13ae128646e4a80cbd328d8

    • SSDEEP

      384:d2yOapglcAH9vg55zs935xZxO5XAXtI/dSK5IkSkkBkd5555555555555555555G:dZOR6YvpO2jCjfyl

    Score
    1/10
    behavioral17behavioral18

    • Target

      POS58/pos58_win98/UNIDRV.DLL

    • Size

      208KB

    • MD5

      39d544cce2ed3dba9858b9e513409d2e

    • SHA1

      20d8d9bb9b647564af79a2cf352d44aa8c7df088

    • SHA256

      dba11943e0fd8018bf474f5df7c459d741515fd4bd0e2b4b1b79ecaa144b3e1b

    • SHA512

      7ef081e2b45291c6dbdf66160320e0bf9d2bd7a3d4faf7369b6ba6901f19cf756816e50e50afa8a2694bac2cac17c86eb2f1ae013f328ec08971ca04ff439744

    • SSDEEP

      6144:KduLei8gf2Zt6/Rml2Tklr/PK4Hl6bt9Z+cLNNTlSJm9BS:MuLei8gf2Zt6/R82GLPK4F6btZhNpSIy

    Score
    1/10
    behavioral19behavioral20

    • Target

      RWic.dll

    • Size

      287KB

    • MD5

      25d6489b7deeac1cf38ef2d62a8fe433

    • SHA1

      54594e79534ec4000d5d5a86fd68cf18b0feca01

    • SHA256

      1678a564785ea7e1ff7164d6752706aec1aa0cc1e115ee7e0864b6932daeee0c

    • SHA512

      3aa75b7eb71882a6ce694540a2d4330b988d5d41d7bade71da4463f98825dca056d13c1e07cd37460e69175614c23df2be5347b4610b186b82c6b5fb53d13f57

    • SSDEEP

      6144:js1/IYrUqsU07McLcxBOVwg/mvDHysUejWa4Zt6gshKEZ1OQmNBmDq1bI/df:js1/IYo5UTCcxBOV+vxHjWaqshKEvOQB

    Score
    3/10
    discovery
    behavioral21behavioral22

    • Target

      mpok.exe

    • Size

      1.8MB

    • MD5

      2328c72d32da72f31b51d0797cb9ccaf

    • SHA1

      5cd63580b5347d3fb867cb247906d046d606832b

    • SHA256

      883f5c8fad45aaf1c3d3576674592a8ea73040dd156dc6b5413ae2a3a147d9a9

    • SHA512

      3015172e34ab7ba5615fad97e5d7aee496e06e857fa75b194398a88a33c5430e6c04e2c5d6152eecfac4ac85b0faa01c3e34bf9e1e89fd61148143ed0a99ae68

    • SSDEEP

      49152:o9IeX5F/R/o6/cx4AGMKPMqV43Jf4Ms9MZJkjF:cz/R/oOAE0qgJf14M6F

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral23behavioral24

    • Target

      readme.htm

    • Size

      44KB

    • MD5

      5eac17e3fb90fd6a909dc0082c8408de

    • SHA1

      42576a8cadc9759cbbfdf7bb8c4f90c1cb5a6fa7

    • SHA256

      aa874f47528ae751345d9130c9028ca2dcf03138e3152a3ae0c5b320b52da932

    • SHA512

      23063ad1777846c5723baa6e683b2129cd5ada2aa03d77b518bb781c02f754ae587e5859f2d9d05e487c5866ab778df2e9de6ffb1475665cc412b491e616a705

    • SSDEEP

      768:zgb/lhrT4n/PXX2lLPsPeJhdkemlIdYrQZ7RLu:zShKPXmlzKeJhue0kzRRi

    Score
    3/10
    discovery
    behavioral25behavioral26

    • Target

      uninst.exe

    • Size

      49KB

    • MD5

      41f7e5a63008dcf37777d36f298896c1

    • SHA1

      b3848df73759c0e3a96c91354212820900d8b35d

    • SHA256

      d1e044e46ddc6e6a9a81690eb9a6594184b4245ab69cd1de7005946eb775f02d

    • SHA512

      dcafd9ebd98b323dc40857c0715d65b7cfc108cad0a5736058c132223976676e0a95a8fe3f58856a58a26813db6c3284b81cf73e34ef76d68a661c3fb97b566c

    • SSDEEP

      768:uh03BWfzcJpdd4jU3eRo8rwV0GfL7rtU7UMt3MBJjwWQDk6X22m7rH:uh03grsyj5Rk0gtUABJ/QPX22O

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral27behavioral28

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

discovery
Score
7/10

behavioral2

discovery
Score
7/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

Score
1/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
5/10

behavioral24

discovery
Score
5/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
7/10

behavioral28

discovery
Score
7/10