Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

0c16048c8b...18.exe

windows7-x64

3

0c16048c8b...18.exe

windows10-2004-x64

3

$PLUGINSDI...nk.dll

windows7-x64

3

$PLUGINSDI...nk.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ON.dll

windows7-x64

5

$PLUGINSDI...ON.dll

windows10-2004-x64

5

$PLUGINSDIR/xml.dll

windows7-x64

3

$PLUGINSDIR/xml.dll

windows10-2004-x64

3

DuiLib.dll

windows7-x64

3

DuiLib.dll

windows10-2004-x64

3

PlayerUpdate.exe

windows7-x64

3

PlayerUpdate.exe

windows10-2004-x64

3

Unins.exe

windows7-x64

7

Unins.exe

windows10-2004-x64

7

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...on.dll

windows7-x64

3

$PLUGINSDI...on.dll

windows10-2004-x64

3

$PLUGINSDI...el.dll

windows7-x64

3

$PLUGINSDI...el.dll

windows10-2004-x64

3

$PLUGINSDI...nk.dll

windows7-x64

3

$PLUGINSDI...nk.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ON.dll

windows7-x64

5

$PLUGINSDI...ON.dll

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0c16048c8b4e5a9e35fa34e9322feb5d_JaffaCakes118

  • Size

    2.3MB

  • Sample

    241002-xqhypa1hml

  • MD5

    0c16048c8b4e5a9e35fa34e9322feb5d

  • SHA1

    97fdbed04f8820ed066121e77ef40928aaaf11fe

  • SHA256

    090e0888ae8682a9296bc1c8790ea8cd7ee3c19c1d1977c1b2d57eab9915d340

  • SHA512

    672e88b277381de28cad56f6f703b0432fb012e7322d19b93c23e1632b64761fcc9308714a08d946dbe71424ed72284c08ff739a13c05d90cdd9817dcb67bf92

  • SSDEEP

    49152:Qr+EugT2X/C/G/sy22IN9lUiyMi1r/toV8vRbOgFFotiobqeBEld8c:e+xe2vCVystUhl5CgFci/Bd8c

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      0c16048c8b4e5a9e35fa34e9322feb5d_JaffaCakes118

    • Size

      2.3MB

    • MD5

      0c16048c8b4e5a9e35fa34e9322feb5d

    • SHA1

      97fdbed04f8820ed066121e77ef40928aaaf11fe

    • SHA256

      090e0888ae8682a9296bc1c8790ea8cd7ee3c19c1d1977c1b2d57eab9915d340

    • SHA512

      672e88b277381de28cad56f6f703b0432fb012e7322d19b93c23e1632b64761fcc9308714a08d946dbe71424ed72284c08ff739a13c05d90cdd9817dcb67bf92

    • SSDEEP

      49152:Qr+EugT2X/C/G/sy22IN9lUiyMi1r/toV8vRbOgFFotiobqeBEld8c:e+xe2vCVystUhl5CgFci/Bd8c

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/ShellLink.dll

    • Size

      4KB

    • MD5

      073d44e11a4bcff06e72e1ebfe5605f7

    • SHA1

      5f4e85ab7a1a636d95b50479a10bcb5583af93f3

    • SHA256

      b96b39cb4ad98f4820b6fd17b67e43d8d0f4b2667d50caa46eff44af245d75bb

    • SHA512

      e9f99b96334764ae47aa026f7f24cfb736859a9131bd1c5ec7e070e830b651787f49910911f82e4ade0dc62fea0ad54ba210b07e44830eb2be6abb710a418a98

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsJSON.dll

    • Size

      7KB

    • MD5

      b9cd1b0fd3af89892348e5cc3108dce7

    • SHA1

      f7bc59bf631303facfc970c0da67a73568e1dca6

    • SHA256

      49b173504eb9cd07e42a3c4deb84c2cd3f3b49c7fb0858aee43ddfc64660e384

    • SHA512

      fdcbdd21b831a92ca686aab5b240f073a89a08588e42439564747cad9160d79cfa8e3c103b6b4f2917684c1a591880203b4303418b85bc040f9f00b6658b0c90

    • SSDEEP

      96:Zw8NZ0x0OOdzJt0TwYKj7W/NYDNd9fQ6blfW+KrWC69r7ncnrD6Qdm:6e/7vAmrHblfW3iCmDcru

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/xml.dll

    • Size

      118KB

    • MD5

      42df1fbaa87567adf2b4050805a1a545

    • SHA1

      b892a6efbb39b7144248e0c0d79e53da474a9373

    • SHA256

      e900fcb9d598643eb0ee3e4005da925e73e70dbaa010edc4473e99ea0638b845

    • SHA512

      4537d408e2f54d07b018907c787da6c7340f909a1789416de33d090055eda8918f338d8571bc3b438dd89e5e03e0ded70c86702666f12adb98523a91cbb1de1d

    • SSDEEP

      1536:U2A8OSGjylgkara+70LICin9zgtg2LxowhtJu6MqSNicNEtIfF42q2KC:OzjLkarn7O+n9z2L6whFtGF42bK

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      DuiLib.dll

    • Size

      452KB

    • MD5

      20e9997c9fe58bfa977f84b671210052

    • SHA1

      de43b84afdecbd8643b4144d6ed73a294c1b47f5

    • SHA256

      7a118c69215e7d92a37162537a1773d6488fff118aa317e240a8330de6d5e085

    • SHA512

      ec24b6efa748fe7f973463b5c526a22fa337d3fb8a465e996cd60978116e021cefdaeaaa43cd2625e6895b413bb114303371d1d84b06da361c024c91b1b2c95f

    • SSDEEP

      6144:uYDC+Q22TIbDClF/rKvK0WXD34s3hhgiYBrk5ee3ldB3kAc5:A+Q2wpuTAD3tRhgiY25euldB3Y

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      PlayerUpdate.exe

    • Size

      147KB

    • MD5

      0097806a99f3f4be8d535a3398ed69d6

    • SHA1

      62948c6575e3315d20cd655cb2a617e2071719a4

    • SHA256

      d137f98b933191759098c826c4aea5b6353abbcb09d5a720ab54fbcdefec7e98

    • SHA512

      3bf1ba340341ee6678fccdf56d0926065e6a6459a9f178effc8de4b44ac4698e372cdbd9198df89c3f879238589e2684a8949758bd19a4752eeeeec2453f70eb

    • SSDEEP

      3072:7mJb+vDBsCkKTMt3vGecAFkpdgrThUQFasQQHNM7RZPOb/L:7iK4t34AFNaQFnQQutAb/L

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      Unins.exe

    • Size

      149KB

    • MD5

      5286d1d76f3ee3d3c3bc324854133771

    • SHA1

      6d3ee9fb07feeaa3355a46ba096e8a86a8474cc4

    • SHA256

      c796c436fa42d694c536b9bf0fddebe1dbe1286895886e57c3873845254e1731

    • SHA512

      bd4796193d7343e5cb543de80170547eb88725a2435ec6b45b329b048b70ef65a9813b2ef129df3a30a7ab81c4ea269155d3965d44c93c3aab508e72436a9cd4

    • SSDEEP

      3072:6gQWiF+z4naYOLYvggLgdgeXYQVH0+ptiFA18ZKaRIQTXNDv+:6gQ+0naY3vggMdgeIudmVmQLNj+

    Score
    7/10
    discoveryupx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      254f13dfd61c5b7d2119eb2550491e1d

    • SHA1

      5083f6804ee3475f3698ab9e68611b0128e22fd6

    • SHA256

      fd0e8be2135f3d326b65520383a3468c3983fa32c9c93594d986b16709d80f28

    • SHA512

      fcef8ac5bd0ee6e316dbbc128a223ba18c8bf85a8d253e0c0877af6a4f686a20b08d34e5a426e2be5045962b391b8073769253a4d9b18616febc8133ccf654f7

    • SSDEEP

      192:t5ZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRYgsfA:fBo/680dCI5adOjFOg9//p27uNw2bo

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      $PLUGINSDIR/NotifyIcon.dll

    • Size

      5KB

    • MD5

      9ab83d7ef9bd55db63ceb33840431cd5

    • SHA1

      548c54c8b9d683f32b2f1bd8b3f374fc14691fd4

    • SHA256

      d2b04b5b33877521f6f140148521f219e25d2de753ff20954f90dcee55d1a647

    • SHA512

      5fbceba72421834d5b888818b1fea5f88c518ad871539a3ff1422d4a3e3d6bb945dca1da0839158c446e54cdc5c916e1ca17283b44135d2078bb1188ae142545

    • SSDEEP

      48:aFV2n5RPl5A9+DyhKqfCdGMfMGMoTtmZE+dlpn6sT6lQQAsjRz:s05RP72BCdjUGM4R+dHn6tV

    Score
    3/10
    discovery
    behavioral19behavioral20

    • Target

      $PLUGINSDIR/SelfDel.dll

    • Size

      4KB

    • MD5

      5e14f6774c43bdff6ffe0afb0d51c47f

    • SHA1

      fb1e7b6e63afa6db6aa2033b5e7e90f1f4ba5e27

    • SHA256

      7cb51ccf21655e9590a6c3232920b16a3dfef15ffe9df7b8e71f487ca8c24da9

    • SHA512

      6ac533c0485156a68bd1460d8219acf7539b766590910cd646f4d7d4572c072f45369712d88d4e698f4e94aead8082abcbfacc3d6fe890046898f6c6d85274e3

    Score
    3/10
    discovery
    behavioral21behavioral22

    • Target

      $PLUGINSDIR/ShellLink.dll

    • Size

      4KB

    • MD5

      073d44e11a4bcff06e72e1ebfe5605f7

    • SHA1

      5f4e85ab7a1a636d95b50479a10bcb5583af93f3

    • SHA256

      b96b39cb4ad98f4820b6fd17b67e43d8d0f4b2667d50caa46eff44af245d75bb

    • SHA512

      e9f99b96334764ae47aa026f7f24cfb736859a9131bd1c5ec7e070e830b651787f49910911f82e4ade0dc62fea0ad54ba210b07e44830eb2be6abb710a418a98

    Score
    3/10
    discovery
    behavioral23behavioral24

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral25behavioral26

    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      20KB

    • MD5

      50fdadda3e993688401f6f1108fabdb4

    • SHA1

      04a9ae55d0fb726be49809582cea41d75bf22a9a

    • SHA256

      6d6ddc0d2b7d59eb91be44939457858ced5eb23cf4aa93ef33bb600eb28de6f6

    • SHA512

      e9628870feea8c3aaefe22a2af41cf34b1c1778c4a0e81d069f50553ce1a23f68a0ba74b296420b2be92425d4995a43e51c018c2e8197ec2ec39305e87c56be8

    • SSDEEP

      384:jQB2ZUVHUxgoJX0eBA6PcH85db+ya9cC0Ac9khYLMkIX0+G5xgZmT+m//a:j/UFeJ5S6PHLNa9cFam/

    Score
    3/10
    discovery
    behavioral27behavioral28

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      ab73c0c2a23f913eabdc4cb24b75cbad

    • SHA1

      6569d2863d54c88dcf57c843fc310f6d9571a41e

    • SHA256

      3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457

    • SHA512

      99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8

    • SSDEEP

      96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420

    Score
    3/10
    discovery
    behavioral29behavioral30

    • Target

      $PLUGINSDIR/nsJSON.dll

    • Size

      7KB

    • MD5

      b9cd1b0fd3af89892348e5cc3108dce7

    • SHA1

      f7bc59bf631303facfc970c0da67a73568e1dca6

    • SHA256

      49b173504eb9cd07e42a3c4deb84c2cd3f3b49c7fb0858aee43ddfc64660e384

    • SHA512

      fdcbdd21b831a92ca686aab5b240f073a89a08588e42439564747cad9160d79cfa8e3c103b6b4f2917684c1a591880203b4303418b85bc040f9f00b6658b0c90

    • SSDEEP

      96:Zw8NZ0x0OOdzJt0TwYKj7W/NYDNd9fQ6blfW+KrWC69r7ncnrD6Qdm:6e/7vAmrHblfW3iCmDcru

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

upx
Score
7/10

behavioral1

discovery
Score
3/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discoveryupx
Score
5/10

behavioral8

discoveryupx
Score
5/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discoveryupx
Score
7/10

behavioral16

discoveryupx
Score
7/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discoveryupx
Score
5/10

behavioral32

discoveryupx
Score
5/10