Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

3c6fe6fb38...18.exe

windows7-x64

7

3c6fe6fb38...18.exe

windows10-2004-x64

7

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDIR/pwgen.dll

windows7-x64

3

$PLUGINSDIR/pwgen.dll

windows10-2004-x64

3

Launcher.exe

windows7-x64

3

Launcher.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c6fe6fb3867862c4003f95758d7e386_JaffaCakes118

  • Size

    546KB

  • Sample

    241012-2rv2vswarh

  • MD5

    3c6fe6fb3867862c4003f95758d7e386

  • SHA1

    8ac0d2c17f2de2b055cca791e73f557b5348a369

  • SHA256

    24447c3143823b4cf8dc625d1838d6b65baa096a1906c1ca61c9b7282218f332

  • SHA512

    3dc07704fe1d8e99e898cdf559ae1941c15335cc843235a2bae195f129096e01ae41a4bf9def39c951aba0ff4dbd5f15951fc820e15a838957656d9346fdd743

  • SSDEEP

    12288:Uuog1lmM9M9jYiF6vyJ8Ho8XYtYvPlWLay2EWDKvby:Ujg1lmXj7GmL8otYnlWaEWDKG

Score
7/10
discovery

Malware Config

Targets

    • Target

      3c6fe6fb3867862c4003f95758d7e386_JaffaCakes118

    • Size

      546KB

    • MD5

      3c6fe6fb3867862c4003f95758d7e386

    • SHA1

      8ac0d2c17f2de2b055cca791e73f557b5348a369

    • SHA256

      24447c3143823b4cf8dc625d1838d6b65baa096a1906c1ca61c9b7282218f332

    • SHA512

      3dc07704fe1d8e99e898cdf559ae1941c15335cc843235a2bae195f129096e01ae41a4bf9def39c951aba0ff4dbd5f15951fc820e15a838957656d9346fdd743

    • SSDEEP

      12288:Uuog1lmM9M9jYiF6vyJ8Ho8XYtYvPlWLay2EWDKvby:Ujg1lmXj7GmL8otYnlWaEWDKG

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/Banner.dll

    • Size

      4KB

    • MD5

      0116a50101c4107a138a588d1e46fca5

    • SHA1

      b781dce23e828cf2b97306661c7dad250a6aaf77

    • SHA256

      ab80cf45070d936f0745f5e39b22e6e07ba90aa179b5ec4469ef6e2cb1b9ef6b

    • SHA512

      55de6aeaad05b01a25828553d3ea9f1b32a8b0c35c42dc6106bed244320e3421ec6a6f5359b15f9d18dd1e9692ca5572b2736d9d48cceb07b9443601d00a5988

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      a5f8399a743ab7f9c88c645c35b1ebb5

    • SHA1

      168f3c158913b0367bf79fa413357fbe97018191

    • SHA256

      dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9

    • SHA512

      824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977

    • SSDEEP

      192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/pwgen.dll

    • Size

      16KB

    • MD5

      a555472395178ac8c733d90928e05017

    • SHA1

      f44b192d66473f01a6540aaec4b6c9ac4c611d35

    • SHA256

      82ae08fced4a1f9a7df123634da5f4cb12af4593a006bef421a54739a2cbd44e

    • SHA512

      e6d87b030c45c655d93b2e76d7437ad900df5da2475dd2e6e28b6c872040491e80f540b00b6091d16bc8410bd58a1e82c62ee1b17193ef8500a153d4474bb80a

    • SSDEEP

      96:Rb32p/4mp563gfdaDf2GEFd69qI214YgU+dXXDtFCOdd7KPcC+pyTY62l2z252NJ:YCQAED61dpEEN5VifUbw2mDG0

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      Launcher.exe

    • Size

      104KB

    • MD5

      1c8e9f8911b5d0f692ae7accf45c6985

    • SHA1

      737e35b716acfcb267ca0b8b7852c03d21109123

    • SHA256

      44bfe6cfeca0d78e7c6b09c53259f6a177d8722dd5a3c4ebc4398cc23848f37f

    • SHA512

      e83bc21a847b4806de30a7a8a8c6872ee21e574ec4d8cd3d50098a9d3421183df239cb0e4695c460595dbf610a1f8066e87ffb5f1c307bc8645fefc9c5b758c0

    • SSDEEP

      3072:ygtbOfO40hRow3K2mFrifb/C75cfSBXAKni:ygROfO1KmKdij/C7K6VAKn

    Score
    3/10
    discovery
    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks