Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

27fb410d5a...18.exe

windows7-x64

7

27fb410d5a...18.exe

windows10-2004-x64

7

$PLUGINSDIR/17561.vbs

windows7-x64

1

$PLUGINSDIR/17561.vbs

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDIR/SkinH.dll

windows7-x64

5

$PLUGINSDIR/SkinH.dll

windows10-2004-x64

5

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/pcpc.vbs

windows7-x64

3

$PLUGINSDIR/pcpc.vbs

windows10-2004-x64

3

$PLUGINSDIR/run.vbs

windows7-x64

3

$PLUGINSDIR/run.vbs

windows10-2004-x64

7

$PLUGINSDI...��.exe

windows7-x64

3

$PLUGINSDI...��.exe

windows10-2004-x64

3

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDIR/Inetc.dll

windows7-x64

3

$PLUGINSDIR/Inetc.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

Shell/Norm...le.dll

windows7-x64

1

Shell/Norm...le.dll

windows10-2004-x64

1

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    27fb410d5aa6711fdfb83052c703203f_JaffaCakes118

  • Size

    1.6MB

  • Sample

    241009-a6rjfazamd

  • MD5

    27fb410d5aa6711fdfb83052c703203f

  • SHA1

    bd3a79886d13837d1643227356946befcd488eb9

  • SHA256

    2b49ca21dd645edd3d08709a68f205cc59bcc2a48b8b3ba49815fdceefbb1c4e

  • SHA512

    b9681f68136ad3b7b95663b810b062cf198dedc5bd50d679dbc5883ff5feab9561d630e5b43e2da0401dad233088d8a7a5cdd024f1f57ffbe27ace642741a692

  • SSDEEP

    24576:JS91TM/9KwQXJZcTufYgwDUuLKzY9IfKhV98ROv1enKEUdx3WO3TOHM3ISjaa:JCCVRQX/cSFwDEY9jhV8UELUdxWcTF7

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      27fb410d5aa6711fdfb83052c703203f_JaffaCakes118

    • Size

      1.6MB

    • MD5

      27fb410d5aa6711fdfb83052c703203f

    • SHA1

      bd3a79886d13837d1643227356946befcd488eb9

    • SHA256

      2b49ca21dd645edd3d08709a68f205cc59bcc2a48b8b3ba49815fdceefbb1c4e

    • SHA512

      b9681f68136ad3b7b95663b810b062cf198dedc5bd50d679dbc5883ff5feab9561d630e5b43e2da0401dad233088d8a7a5cdd024f1f57ffbe27ace642741a692

    • SSDEEP

      24576:JS91TM/9KwQXJZcTufYgwDUuLKzY9IfKhV98ROv1enKEUdx3WO3TOHM3ISjaa:JCCVRQX/cSFwDEY9jhV8UELUdxWcTF7

    Score
    7/10
    discoveryupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/17561.vbs

    • Size

      912B

    • MD5

      2ac26956932b367d8f52cfc9dab33f81

    • SHA1

      c156cc9273e8309dcc7ee7b32cf61d5e080fef67

    • SHA256

      609cf60273fadbe4c80f8f49584af34fd9406ce266b827dde9ce968fad5b3f72

    • SHA512

      e0f26874433e78d3c85186bc8808860dcd751d4bcdc674d9339fd1b4ced792c24d4618e68c7fa22b69200e7079fab18d93f74534fd075f2fbee2662375842f10

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/AdvSplash.dll

    • Size

      6KB

    • MD5

      13cc92f90a299f5b2b2f795d0d2e47dc

    • SHA1

      aa69ead8520876d232c6ed96021a4825e79f542f

    • SHA256

      eb1ca2b3a6e564c32677d0cdc388e26b74ef686e071d7dbca44d0bfa10488feb

    • SHA512

      ff4e6e6e7104568fc85ef3a3f0494a5c7822a4ceaf65c584ad534f08f9a472a8d86f0a62f1f86343c61e2540b2254714b7ea43e4b312ff13d8271ff069386fa3

    • SSDEEP

      96:6hNSXIcmYjkvTS6MnBNZ1BMjDfhkkEkkXstWpPwoS:JXIpzTSd1BSk/kJtWpP

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/ButtonLinker.dll

    • Size

      7KB

    • MD5

      dd85ac7d85c92dd0e3cc17dfd4890f54

    • SHA1

      a128fb7a05965c1a9913c6f5e419e6c4c0a7d2fa

    • SHA256

      27abd2a4fb1bf66add60221b52d061bbe24d2d21e13600725ff7a5c6c777b504

    • SHA512

      e4ff8216c65110a9d156f37c2062acb53a72daa8af12dfc24278920d9e1a4083a81b1446759df75405b2da34c7bfb1afc33184feedd0aee4ed73f79fcbb1a8a1

    • SSDEEP

      96:q0GBDU3ADeEZlBLx6sWHCKGKVR3YXqNNtFa4PaaU4x:X53jEd2n3Y6NNtFBaa

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      325b008aec81e5aaa57096f05d4212b5

    • SHA1

      27a2d89747a20305b6518438eff5b9f57f7df5c3

    • SHA256

      c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b

    • SHA512

      18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf

    • SSDEEP

      192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/SkinH.dll

    • Size

      84KB

    • MD5

      a00c474dc4ced90b8f5a692108c45dce

    • SHA1

      e02722d30a6218523e9ddef287817788a4a9b9fc

    • SHA256

      6504e515cbcf89cb98fd9f1a310125bfdf93e1f6a6bf0c64c0229e5670cac9b1

    • SHA512

      e81b001379f94fabb71f1d6a019b81202e00da7338048b77d1728b40427689a32801419377d3e86c51c5e418cc3ccc328ee00adc69eaa575267bcaac8f477abd

    • SSDEEP

      1536:uVNx6WNnPZ369Z3TCy5KcGhVek8Hvv144SNT7qgG7kQSeQmnouy8U:uVNx6WNnPZK9RTkieJw7uWoutU

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/pcpc.vbs

    • Size

      910B

    • MD5

      03e3b03acfb4900c61ec54c07e9a6834

    • SHA1

      f6d1cb731fb3bc69ad2fad90874ab73895915aee

    • SHA256

      a3d17e06945cd044a9b2a13dab8f4ca7d2f309bb564fbfcea5c1e570f82aff89

    • SHA512

      19d59a1df2d6222dd685b2c5912d09b280fdcf134494f77d61923b233be5c5a7892262a514a4e38955ba2f8af1715be1340f7544e56668b0681014409ee64239

    Score
    3/10
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/run.vbs

    • Size

      128B

    • MD5

      ef270d12f353b94df409fdf9e1dc7868

    • SHA1

      46531b1f2bae7a7cc6dccad524943c6dcecf9219

    • SHA256

      ab6539d229042f0e62871b4d5c8fa4900dd74f0d6b58ebf460649f872a5a24c1

    • SHA512

      04ff9b1476749e4d711b9609ee84db93f1802159a778b2710bce089d2b11f0b377044f6cbfd556091d788d06674034d4b55544ff5047ff2d2c02a4ae3db4f8d7

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral17behavioral18

    • Target

      $PLUGINSDIR/Ϸ.exe

    • Size

      70KB

    • MD5

      339ea025e089399386696d1c3941e250

    • SHA1

      606b345cdc0b9587b0603cca9e62737ae0a3eb9c

    • SHA256

      070ff0d88fd01d7ddb9e2163c93120d75645c0f43ffd4e661d2cab9cd1ecd348

    • SHA512

      11e2a1fbbcfab6a58351865bb0fb50e6e8891d428522450e39a4bc03e701bc1abf65eddfa1ea3e044467279e2b41dc7da03503308177bed682c8c5d3fc882605

    • SSDEEP

      1536:Nf4exGDkeZ4mOoSgJEAJJh4Romu/BLohf6tk6NO1uWFO:F4eYZ4+1JXJJh45SBOZFO

    Score
    3/10
    discovery
    behavioral19behavioral20

    • Target

      $PLUGINSDIR/BrandingURL.dll

    • Size

      4KB

    • MD5

      71c46b663baa92ad941388d082af97e7

    • SHA1

      5a9fcce065366a526d75cc5ded9aade7cadd6421

    • SHA256

      bb2b9c272b8b66bc1b414675c2acba7afad03fff66a63babee3ee57ed163d19e

    • SHA512

      5965bd3f5369b9a1ed641c479f7b8a14af27700d0c27d482aa8eb62acc42f7b702b5947d82f9791b29bcba4d46e1409244f0a8ddce4ec75022b5e27f6d671bce

    Score
    3/10
    discovery
    behavioral21behavioral22

    • Target

      $PLUGINSDIR/Inetc.dll

    • Size

      20KB

    • MD5

      50fdadda3e993688401f6f1108fabdb4

    • SHA1

      04a9ae55d0fb726be49809582cea41d75bf22a9a

    • SHA256

      6d6ddc0d2b7d59eb91be44939457858ced5eb23cf4aa93ef33bb600eb28de6f6

    • SHA512

      e9628870feea8c3aaefe22a2af41cf34b1c1778c4a0e81d069f50553ce1a23f68a0ba74b296420b2be92425d4995a43e51c018c2e8197ec2ec39305e87c56be8

    • SSDEEP

      384:jQB2ZUVHUxgoJX0eBA6PcH85db+ya9cC0Ac9khYLMkIX0+G5xgZmT+m//a:j/UFeJ5S6PHLNa9cFam/

    Score
    3/10
    discovery
    behavioral23behavioral24

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      0dc0cc7a6d9db685bf05a7e5f3ea4781

    • SHA1

      5d8b6268eeec9d8d904bc9d988a4b588b392213f

    • SHA256

      8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

    • SHA512

      814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

    • SSDEEP

      192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo

    Score
    3/10
    discovery
    behavioral25behavioral26

    • Target

      Shell/NormalColor/Shellstyle.dll

    • Size

      353KB

    • MD5

      cced53d9c7ae36dc10f82a5b73f65b53

    • SHA1

      06e6918c94c5ee206a65f81381e9ed967e0d4b60

    • SHA256

      474dfd4f9eefb07ad3f4d3faf061f677f6127ce41a7ad8a4648ade0b1fdad641

    • SHA512

      4f42924a6df2c8174da51b12c3c3d2f1b2cba3bd90d211ff3c268f939e5eb49f175a4f6050535a53db24e136d18dd6d1d1e30d81342a688637bc50679002b215

    • SSDEEP

      3072:YKc9J5aN67L0UMSQSQpXEeB8ZucsOjGGVWH10GC1HW5ZHpGh:oJ5aN67L0UMSlvUcseQ5ZHA

    Score
    1/10
    behavioral27behavioral28

    • Target

      uninst.exe

    • Size

      376KB

    • MD5

      765f54b192c4bf31c01fa469894034d9

    • SHA1

      3d53eeaf5abab00b30402ec6947a9d2fad1207a8

    • SHA256

      5a8202c253886c6ad5a4c626b72e4cdafc9075f8b8296829d1ff3aba4e7148f1

    • SHA512

      b50d2b5b02eaad26ebeea66f1d1e4a3c71180a98619e1c80a536f3a289050d50fe884fc0023b4efc71d2cbd5fe4fea5f3fd9a03918d9e9ab6c5c67486493677f

    • SSDEEP

      3072:lQIURTXJ+2WrSfqW4C3ZtmltDcFtlEesQgC5tM:lsc6qY3lEesQgCHM

    Score
    7/10
    discovery

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral29behavioral30

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

upx
Score
7/10

behavioral1

discoveryupx
Score
7/10

behavioral2

discoveryupx
Score
7/10

behavioral3

Score
1/10

behavioral4

Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discoveryupx
Score
5/10

behavioral12

discoveryupx
Score
5/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

Score
3/10

behavioral16

Score
3/10

behavioral17

Score
3/10

behavioral18

Score
7/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

discovery
Score
7/10

behavioral30

discovery
Score
7/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10