Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

5

273dd6f0b5...18.exe

windows7-x64

5

273dd6f0b5...18.exe

windows10-2004-x64

5

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDIR/OnTop.dll

windows7-x64

3

$PLUGINSDIR/OnTop.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...sk.dll

windows7-x64

3

$PLUGINSDI...sk.dll

windows10-2004-x64

3

$TEMP/UpdateInfo.exe

windows7-x64

5

$TEMP/UpdateInfo.exe

windows10-2004-x64

5

Update/jpborder.exe

windows7-x64

5

Update/jpborder.exe

windows10-2004-x64

5

jpdesk.exe

windows7-x64

6

jpdesk.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    273dd6f0b59a32e5a462740e63ac3254_JaffaCakes118

  • Size

    2.4MB

  • Sample

    241008-3sa9hstfqf

  • MD5

    273dd6f0b59a32e5a462740e63ac3254

  • SHA1

    8eea7849b95dde92446809a245155c71b372b88b

  • SHA256

    6ce95dfac314392848639bf784d0b729fc99460fedc9aed82e27ae6f02001c59

  • SHA512

    c186a4c3b2e6bf2da31171a87ad2e11e1ac147d317b2476713e6b2d63d094b7b462d0282539cbf1dadd18ecd81f34f993869afd7dc1fff274780477875a6421a

  • SSDEEP

    49152:Sw1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFILjyMPQOY1o+zENOPHFv5SY:SuPQOY1o+zaOvFv5S++wVfRlAD7cPaqd

Score
6/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      273dd6f0b59a32e5a462740e63ac3254_JaffaCakes118

    • Size

      2.4MB

    • MD5

      273dd6f0b59a32e5a462740e63ac3254

    • SHA1

      8eea7849b95dde92446809a245155c71b372b88b

    • SHA256

      6ce95dfac314392848639bf784d0b729fc99460fedc9aed82e27ae6f02001c59

    • SHA512

      c186a4c3b2e6bf2da31171a87ad2e11e1ac147d317b2476713e6b2d63d094b7b462d0282539cbf1dadd18ecd81f34f993869afd7dc1fff274780477875a6421a

    • SSDEEP

      49152:Sw1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFILjyMPQOY1o+zENOPHFv5SY:SuPQOY1o+zaOvFv5S++wVfRlAD7cPaqd

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      32KB

    • MD5

      83142eac84475f4ca889c73f10d9c179

    • SHA1

      dbe43c0de8ef881466bd74861b2e5b17598b5ce8

    • SHA256

      ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729

    • SHA512

      1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1

    • SSDEEP

      384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      254f13dfd61c5b7d2119eb2550491e1d

    • SHA1

      5083f6804ee3475f3698ab9e68611b0128e22fd6

    • SHA256

      fd0e8be2135f3d326b65520383a3468c3983fa32c9c93594d986b16709d80f28

    • SHA512

      fcef8ac5bd0ee6e316dbbc128a223ba18c8bf85a8d253e0c0877af6a4f686a20b08d34e5a426e2be5045962b391b8073769253a4d9b18616febc8133ccf654f7

    • SSDEEP

      192:t5ZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRYgsfA:fBo/680dCI5adOjFOg9//p27uNw2bo

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/OnTop.dll

    • Size

      3KB

    • MD5

      7c0c240e911a521e8e554a10d04e558f

    • SHA1

      d12ca9c464f2764e211039c09e56cb347626f7c7

    • SHA256

      28cf47c05c86b2264ea1da120d3644cb46c86d6f27072a9a853e63e05ec97a25

    • SHA512

      579b6787061efdc7f618f3c5a513cb539ccbe12ca41ba5e9ba8f00d03600edcdd82262b0fbfd58b96231c461f18b1233d657cbd0d1b827ea9df5374508578707

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      ab73c0c2a23f913eabdc4cb24b75cbad

    • SHA1

      6569d2863d54c88dcf57c843fc310f6d9571a41e

    • SHA256

      3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457

    • SHA512

      99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8

    • SSDEEP

      96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/nsWebJPDesk.dll

    • Size

      303KB

    • MD5

      064c5337ed2c6f123f5270d7dcec2a40

    • SHA1

      51efbdc6f795510b84f6c0e3b9796f8720a55983

    • SHA256

      e73b9d938fcccf600d3fa743965b7190f376c830091b05f828b052d1f439d389

    • SHA512

      5c840dfcc346ddc1a4de2ada1ea311cf1ab049866ce9bcf02c9d20422a92f521e35413323d818393ba0b452499c394eadc39a94200afd35cd6fb1e143e11bd7f

    • SSDEEP

      3072:Y5gYOFiiBz0yPYx2yXk+5OqQkkc6ncSQ9vyw8gekwvegplJwwwwww6pZaELk5A:dFDBYyo2yXOqdKcS0Hwjl2JwK

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      $TEMP/UpdateInfo.exe

    • Size

      236KB

    • MD5

      513ed264991a97329c7eed0e5bee59ed

    • SHA1

      889472a9b4abadc26f919606e9caf644513bb545

    • SHA256

      cbb17b36c41cb999cb0d647145cad2538593dee35ec6b4cc52ced47375e2f62c

    • SHA512

      c33473c25bd5742ca5f1e588af67bc0c0f6b38132d955cda774448d735e59e9ae366a9c5f1bb996fac1acb8ce3e24a3bcc309dd03d91164cad0b51bde2720d24

    • SSDEEP

      6144:noxk7dJBF6gtq7wzcUukg8z1xfr7yMsJEVj4hFePit:nssd07wY6z1xz7tNuFI2

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral15behavioral16

    • Target

      Update/jpborder.exe

    • Size

      627KB

    • MD5

      7d19e6f730bcf70547ee1f3d3942de33

    • SHA1

      49508ab3ec07b4fa8cd258d503226690efb77854

    • SHA256

      61cce76a8e47bb8df52c60e19ff3a0db36aeb76cc5cedcdf18aaf2e44424f917

    • SHA512

      d49f040e1be08c30b812e773b7bcafda6ee18265a8c9de5619ea5fff69b52d7e48975e1e87d6037c64faf108d77e97e4b1aeae69d526111432d8ed153bd3e06d

    • SSDEEP

      12288:221BH+uQMNqcWnbzEQs534nn3TQG0+ClAVaDwIspv51SDDFpZh5zKxoEYlLqfI:2QBjNebzEQsIjN0/psFSFpZ3LFLSI

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral17behavioral18

    • Target

      jpdesk.exe

    • Size

      903KB

    • MD5

      fd11f6fe68c6a543576fd06e9258b359

    • SHA1

      df92e8b8f6e1e16f00667387f249c1f6b9cc8892

    • SHA256

      a5e2d6c7db54bc2e15ff5b7bd0f0bf4c416b842fdd2a609e5d85b67b9650c686

    • SHA512

      4480373c91cc23174c08852cdbabbb0cca10b938c9c1ae73dae775bf83dd8977f65fc54955fe593dc32bede246002c310d32bad33a21c183c212ff0092ff6c2d

    • SSDEEP

      24576:+oAXT+u1Ngb1FPQgfqIRknfKtefSTpME2ZRh4r:+H6uWMmqfSTGEmL4r

    Score
    6/10
    discoverypersistenceupx

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral19behavioral20

MITRE ATT&CK Enterprise v15

Tasks