Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

0e2614021d...18.exe

windows7-x64

7

0e2614021d...18.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$R3/dvflekzd.dll

windows7-x64

6

$R3/dvflekzd.dll

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e2614021d554b0534d0fb8e50dadd5e_JaffaCakes118

  • Size

    148KB

  • Sample

    241003-f7zjbsxbjk

  • MD5

    0e2614021d554b0534d0fb8e50dadd5e

  • SHA1

    1a78dd974bc2346931566d06f17899bdf6ab7971

  • SHA256

    9f02093aac7808cb10582b4b2767aa16782f28d00b8b8e9c9d45196e00338cd7

  • SHA512

    455c2fe11aea0c99ca6c9a41c474bc028db28566c1173588a56d4a406d6263389548ed1df181931a57735f04a64ca89649e56064f63101d271f6d9739fbaf7b2

  • SSDEEP

    3072:zQIURTXJAMeVY06GRKHxN48rdIfbnUT9Pk7x+mowAEq:zsneP+H08rdPTBk+wC

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      0e2614021d554b0534d0fb8e50dadd5e_JaffaCakes118

    • Size

      148KB

    • MD5

      0e2614021d554b0534d0fb8e50dadd5e

    • SHA1

      1a78dd974bc2346931566d06f17899bdf6ab7971

    • SHA256

      9f02093aac7808cb10582b4b2767aa16782f28d00b8b8e9c9d45196e00338cd7

    • SHA512

      455c2fe11aea0c99ca6c9a41c474bc028db28566c1173588a56d4a406d6263389548ed1df181931a57735f04a64ca89649e56064f63101d271f6d9739fbaf7b2

    • SSDEEP

      3072:zQIURTXJAMeVY06GRKHxN48rdIfbnUT9Pk7x+mowAEq:zsneP+H08rdPTBk+wC

    Score
    7/10
    discoverypersistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $R3/dvflekzd.dll

    • Size

      328KB

    • MD5

      ef63a544e38c3a3f1f40d51cdd67466b

    • SHA1

      5f3e77446c880b9ddcce9dfb26442f2631d9b9b9

    • SHA256

      f35d0b4b42d3c8800f146e96924be72e6c3c4cdf5eebd5ae59127e276bbc12cc

    • SHA512

      83cdaac3504701319e07a14a18170813dd4914faa1b75e73ae5beeb23a44eb1cdee5b772d606de9938f99c4fe6808998677638970ed1c4639e58b5fa57effff9

    • SSDEEP

      3072:x4YhwY/+JeDLUsVQ59c2fRHwjVHqM5IZrqTMa4sb8qLoE+1:nh0ItV01fWHP5Erta4sblV+

    Score
    6/10
    discoverypersistence
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks