Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

0221350049...18.exe

windows7-x64

7

0221350049...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

CookComput...V2.dll

windows7-x64

1

CookComput...V2.dll

windows10-2004-x64

1

Core.dll

windows7-x64

3

Core.dll

windows10-2004-x64

3

DAL.dll

windows7-x64

3

DAL.dll

windows10-2004-x64

3

System.Dat...te.dll

windows7-x64

3

System.Dat...te.dll

windows10-2004-x64

3

ThemeManager.exe

windows7-x64

3

ThemeManager.exe

windows10-2004-x64

3

UIControls.dll

windows7-x64

3

UIControls.dll

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0221350049a1b3eee59cd5967f92379c_JaffaCakes118

  • Size

    983KB

  • Sample

    240930-s9n7laxejg

  • MD5

    0221350049a1b3eee59cd5967f92379c

  • SHA1

    d71e574f7d7e970da86865c1bed615e5bff0367a

  • SHA256

    87fb7d3b0ecb9a34705b9f25e5e3b279b567be516fb11e1a8386ac02f1ddbe61

  • SHA512

    e0176506abbe7450879dae7d2fa8481ebf4eb66f53788f7fd9421dc019b73c86b5c4843712585ac546dae34ff61f69e02f69a36046de40f7ac4e89ab912e6840

  • SSDEEP

    24576:JgNbiOyqY+4OZeLjzbz+qd9zV9jQR4dETezZ6L:JgFipqdhebeqREydETezZ6L

Score
7/10
discovery

Malware Config

Targets

    • Target

      0221350049a1b3eee59cd5967f92379c_JaffaCakes118

    • Size

      983KB

    • MD5

      0221350049a1b3eee59cd5967f92379c

    • SHA1

      d71e574f7d7e970da86865c1bed615e5bff0367a

    • SHA256

      87fb7d3b0ecb9a34705b9f25e5e3b279b567be516fb11e1a8386ac02f1ddbe61

    • SHA512

      e0176506abbe7450879dae7d2fa8481ebf4eb66f53788f7fd9421dc019b73c86b5c4843712585ac546dae34ff61f69e02f69a36046de40f7ac4e89ab912e6840

    • SSDEEP

      24576:JgNbiOyqY+4OZeLjzbz+qd9zV9jQR4dETezZ6L:JgFipqdhebeqREydETezZ6L

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      325b008aec81e5aaa57096f05d4212b5

    • SHA1

      27a2d89747a20305b6518438eff5b9f57f7df5c3

    • SHA256

      c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b

    • SHA512

      18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf

    • SSDEEP

      192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/LangDLL.dll

    • Size

      5KB

    • MD5

      9384f4007c492d4fa040924f31c00166

    • SHA1

      aba37faef30d7c445584c688a0b5638f5db31c7b

    • SHA256

      60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5

    • SHA512

      68f158887e24302673227adffc688fd3edabf097d7f5410f983e06c6b9c7344ca1d8a45c7fa05553adcc5987993df3a298763477168d4842e554c4eb93b9aaaf

    • SSDEEP

      48:iV6pAvmNC6iMPUptxEZK65x/AmvycNSmwVsOYJyvrpXptp/JvR0Jlof5d2:2811GED5ZTvycNSmwVsTJuftpZR0Sd2

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      20KB

    • MD5

      9a7d35d1e9e5dfb6a7872d49cf64db83

    • SHA1

      4da9dd5427c0fdfa2cce3ee29ac5147b74ff3834

    • SHA256

      c7a365c50611e7b3bbec6f73e9b33fa83d9ca91c34cde67969cd7cab79293160

    • SHA512

      cb98bc94b883ecd88102a017de484560085c0f70fa379489618cc10c017d543e53b12502a0a7cae49682887676c4c590fc481ab9cd531467b1d090499783db3a

    • SSDEEP

      384:qYJFIiP3ZudtjmSBSWY1IAxNOzqXBrxzs0UhU7ya4LH0Ac9khYLMkIX0+G0cgLGh:qaBcdtjmsSW6IAxNQqXBrx40UhUua4Lx

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      CookComputing.XmlRpcV2.dll

    • Size

      120KB

    • MD5

      537de6ee0a72601be1e1e452a3010954

    • SHA1

      91f87bc5cc88249811dfcd130ccc2ca907eee2d3

    • SHA256

      5826818bb43d41f6bc08722f036f3f9402dd53b6e6d6356caa5192fadf278451

    • SHA512

      55eba8ba9d51bf5be2f8b40b68b0d162b6f1dfcc692d11e886a17d325fdb07c47965bd9fe590caafcf2a885f4b667b1e1a99a7467c5fc7ed45d214813fe91129

    • SSDEEP

      3072:nYroBKFuiSfBStfhXjCjjETsm1cGvyN0rtmfeJyLG3CE2F+46tD1C2Eo:nwSfBStWnGvsPfeJyLGGKD1C2E

    Score
    1/10
    behavioral10behavioral9

    • Target

      Core.dll

    • Size

      17KB

    • MD5

      22548d146fd7922840081fc42aa8d185

    • SHA1

      43ae9c2490a591f457620997aecc7099f609f371

    • SHA256

      0442323b1d88611348fcd1e1341e04740f032d6b8b7dd8519d77674b0ca27b72

    • SHA512

      bc9806588819dc5da7a58c453dab947546c307c5bf54643192285c93c180482186d0b91f852458264253511381d7ddeb1899c951def0e8116d496a0c555e27ab

    • SSDEEP

      192:PYJ/znaFYhsNBB+VBQIfxVt6fCZ4dkBYMBPdhhSAEaExN8mTqkRjBKJY:PYY3BgOUxVw1dGzBPdhcBaUN8mT7jyY

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      DAL.dll

    • Size

      38KB

    • MD5

      0c23c94af6eb837b081ec60a3a45bae3

    • SHA1

      469089a13c1e36bf54178872c1340710109d2f58

    • SHA256

      f3bf66d963d42b741583036e004ca144d19d022a007925f56bfb5c80c4afe5a3

    • SHA512

      9f353aa5e8493f8b7afae441909e8c701c50a926a73681e85a10e80c7bcbf995914c7a78b6e638ce945b2391413c4d7082edba755750091a2bfaf8d0ad81a3f7

    • SSDEEP

      384:ye/jnG9qxk3g3YUbvwulYZvdiE90JRLZdupJzYsqOleQcbPPOj:nnG90kQokvdUmrDxQQPmj

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      System.Data.SQLite.dll

    • Size

      865KB

    • MD5

      74614aa2a39321d7a995ead5bd64370c

    • SHA1

      7b667f505182cea1c82573b417f8cd78e8a149be

    • SHA256

      f6f69d2375c7a6e950a138046a026f07dd85177ea9b28c6071685602b65359a4

    • SHA512

      f3ae1f48e53748c64aa633c7a9d93087ffe4351e974b256bb2628581714b60a44ca53b787842e6bfb8cac55edba5c0b6e6a5af59efba94675d759bf228fa9f78

    • SSDEEP

      12288:bQOzN2/IHPxPbx8YwkbXFl8a6PifS8trXXcauZYdwMGs9XFNFGFOFwcGF6cmFWch:0ukIHPJKYLvFGifS8trHcBE1

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      ThemeManager.exe

    • Size

      459KB

    • MD5

      064253fb0c87dd3d821b8624f13dd333

    • SHA1

      6f5a50747051bbbdfe8c7f18a151764731ac289c

    • SHA256

      704454bad57418f40601391006f4f4e76f4b6bb443ed55a88fab3c56835bdec0

    • SHA512

      ef9bfe35bc3f52a80125f0ed1680be35db091b9ef7764ffcd6915a482d86eee599a097ef8ea428badae6a89f9cc5658f89e948b3738df418de1b6380f3a19293

    • SSDEEP

      12288:z8oQ11UigNgGrjQ10CGrjQ10rewbGbjQ10:woQJgNgGY19GY1uBbGo1

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      UIControls.dll

    • Size

      14KB

    • MD5

      e48c8103e85b6bb0ae0759d01747ea63

    • SHA1

      cdf4c2de56d68aaff4cf4f917bf78319061fc914

    • SHA256

      f45366d24a5f688a265b3edc518b8b26945872a6a81e2b787e313fc1f272d5e6

    • SHA512

      30701fb887b58dc8a0d8d39faf305f43ca3b068d0e528afeb92c374ae9b718456ec81fd8e3cc53b7adf936ea7bf3dc925a3e32e36adc2b41a1ee46035e382b10

    • SSDEEP

      384:fJo8dCciOyp7yWL2zitnBJu333333bDPLL6j5:HCtnBJu3333333jL6j5

    Score
    3/10
    discovery
    behavioral19behavioral20

    • Target

      Uninstall.exe

    • Size

      85KB

    • MD5

      24c35fb186cd133bb79e64d869692d1f

    • SHA1

      cb7e156a753c853f63fab7e84d5ad20377a8113c

    • SHA256

      4c53fe1d4959a50e64cca049b7572adb3732adeea2a1e6941ac097caaf1e9cbc

    • SHA512

      1ae3afc0404526e31b96cb69d56bc5e9805ca942d93d9af43de55944dfbc31aaaec236dc3e2d1d641bd847041a267b723b50587ab7fb19431023a376d0112f02

    • SSDEEP

      1536:5pgpHzb9dZVX9fHMvG0D3XJgcWYAUsLtBKwaE3IsYW6rkC0e0qm:zgXdZt9P6D3XJZWYM7KwaE3PCT0qm

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral21behavioral22

MITRE ATT&CK Enterprise v15

Tasks