Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
338292a4139...18.exe
windows7-x64
738292a4139...18.exe
windows10-2004-x64
7$PLUGINSDI...is.dll
windows7-x64
3$PLUGINSDI...is.dll
windows10-2004-x64
3ffMediaWat...ion.js
windows7-x64
3ffMediaWat...ion.js
windows10-2004-x64
3ff/chrome/...534.js
windows7-x64
3ff/chrome/...534.js
windows10-2004-x64
3ff/chrome/...ion.js
windows7-x64
3ff/chrome/...ion.js
windows10-2004-x64
3ie/MediaWa...34.dll
windows7-x64
6ie/MediaWa...34.dll
windows10-2004-x64
6uninstall.exe
windows7-x64
7uninstall.exe
windows10-2004-x64
7$PLUGINSDI...is.dll
windows7-x64
3$PLUGINSDI...is.dll
windows10-2004-x64
3General
-
Target
38292a4139161a1245d6d60fadc25027_JaffaCakes118
-
Size
634KB
-
Sample
241012-dmy1yszcmb
-
MD5
38292a4139161a1245d6d60fadc25027
-
SHA1
29d16cfb1b87a0c8e0a243354cf8b8b31a62fbda
-
SHA256
6922bffbab5cadc61a8a22ba1f0079ac9f8c91cf7f0fe899f4cb02211bdc2291
-
SHA512
8b21242883ced7e6208ac351e063f9aa6ca33c94905ec7f37bf0ffee3fe7dd2e4588109eb29d4a216dd67a3d3ad80c1e7bef0d933021a6f0185863e89c79d066
-
SSDEEP
12288:6uOaH3mwXbqEuG4GjeZHkwuPikQ7lKH5p5H9x1IeZHkwulinQZlKR5pxxoiRR:6VaHHoG4GjeZEXi37l6Br1IeZE9iQZls
Static task
static1
Behavioral task
behavioral1
Sample
38292a4139161a1245d6d60fadc25027_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
38292a4139161a1245d6d60fadc25027_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/aminsis.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/aminsis.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
ffMediaWatchV1home1534chaction.js
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
ffMediaWatchV1home1534chaction.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
ff/chrome/content/ffMediaWatchV1home1534.js
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
ff/chrome/content/ffMediaWatchV1home1534.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
ff/chrome/content/ffMediaWatchV1home1534ffaction.js
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
ff/chrome/content/ffMediaWatchV1home1534ffaction.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
ie/MediaWatchV1home1534.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
ie/MediaWatchV1home1534.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
uninstall.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
uninstall.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/aminsis.dll
Resource
win7-20241010-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/aminsis.dll
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
38292a4139161a1245d6d60fadc25027_JaffaCakes118
-
Size
634KB
-
MD5
38292a4139161a1245d6d60fadc25027
-
SHA1
29d16cfb1b87a0c8e0a243354cf8b8b31a62fbda
-
SHA256
6922bffbab5cadc61a8a22ba1f0079ac9f8c91cf7f0fe899f4cb02211bdc2291
-
SHA512
8b21242883ced7e6208ac351e063f9aa6ca33c94905ec7f37bf0ffee3fe7dd2e4588109eb29d4a216dd67a3d3ad80c1e7bef0d933021a6f0185863e89c79d066
-
SSDEEP
12288:6uOaH3mwXbqEuG4GjeZHkwuPikQ7lKH5p5H9x1IeZHkwulinQZlKR5pxxoiRR:6VaHHoG4GjeZEXi37l6Br1IeZE9iQZls
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
-
-
Target
$PLUGINSDIR/aminsis.dll
-
Size
559KB
-
MD5
51ba1095f0ae45a2d444bea506cb9ad4
-
SHA1
038a5d53d055a6d440bd2c8864c2f51db206c5e5
-
SHA256
b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
-
SHA512
f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
-
SSDEEP
12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score3/10 -
-
-
Target
ffMediaWatchV1home1534chaction.js
-
Size
834B
-
MD5
0279a15fc3d2469078f5b53e13ec9820
-
SHA1
b8d5dabb0da571ec37ac762fb0f1039afda7911d
-
SHA256
bcece8511d450a1c6392c12c33c032e04a09f091736636297b412dc5ef7bdbf1
-
SHA512
ddc95b22128819c42df79296e31962de33826080bbb2a7c8795859b70f040620125bd6e931c6ebe07b224c1c0859d83e515ed98f3430153162726cc88fb3d73f
Score3/10 -
-
-
Target
ff/chrome/content/ffMediaWatchV1home1534.js
-
Size
747B
-
MD5
f7019db91ed389843013c51b971bbf31
-
SHA1
6284b31f2966fe234eaf24bea9ec8dd25dfede47
-
SHA256
534ade1641875acc721243f939ab06fcc730791861a06d1f56ccf42835e2f76c
-
SHA512
d5aa323c364b135fac1180afdba78cb8ee2f71c7ea4f5de6f06e4b8d8155db7b279a46d7e00affcb2854a7636280649e9b78ac1652ef7e5a9a8096206c1e8dd6
Score3/10 -
-
-
Target
ff/chrome/content/ffMediaWatchV1home1534ffaction.js
-
Size
678B
-
MD5
0c7eb2f5a76ee484552dd43fb49c4b43
-
SHA1
348ba297b2668d8118b4b82ecffc7f44ccbe1a65
-
SHA256
870dd28c004c7c526dd40042420f6aafad912e5f944714a8cc45d6ec4c6f76bc
-
SHA512
b6127e27c080a54e6c9b1e763e011600bdf199e7e3604a619ad388b0b71999fbcba90731b3ad468b8bf55b9184ce941e5345a6da1cc4ca0f431efa6d230a667a
Score3/10 -
-
-
Target
ie/MediaWatchV1home1534.dll
-
Size
85KB
-
MD5
2c4a5bf66e7eb00ae5533142f36cc7df
-
SHA1
a0d4e048f473209cfae52b909a156a554766a1e9
-
SHA256
8f1afd01be9fc579f625a2957db4c232a4dc999713a567f5e099889c2d3fbd25
-
SHA512
91088444c13c23fec188e02322d896a00a4fe69d69e2aff2df038c5f588cc956a1c0e9e903ca1f598b641c9db9d775c360d272673b36c483ae74c37e6fa180dd
-
SSDEEP
1536:98/1CsEmka04RhRtahrOb8DkhRpHA9glQ+1Vp:212mka0ElahrOtpgua+1V
-
-
-
Target
uninstall.exe
-
Size
285KB
-
MD5
d7ab8a51e40f955ab31f21de08be5683
-
SHA1
a237d0f4b399d63ddc7f7b9e7bf7d8b348662e8b
-
SHA256
1eb776ac03a000824fbfa3386045e351e016c8fe68dc9861a728fe9b90dcb357
-
SHA512
5e777e6cb551278946c045584c8d4bcb0eaed1739a4546c76918f8b65ff3b3a29e611bf55d6bad5a9ad0df8f8b2dedc9f6c1e012e11b5713772f21ce868b6f4f
-
SSDEEP
6144:Ee34JtpeZH+zpyuuz6GZkDOJ/7OafSH5KmrWym09x1v:sLeZHkwuPikQ7lKH5p5H9x1v
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/aminsis.dll
-
Size
559KB
-
MD5
51ba1095f0ae45a2d444bea506cb9ad4
-
SHA1
038a5d53d055a6d440bd2c8864c2f51db206c5e5
-
SHA256
b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
-
SHA512
f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
-
SSDEEP
12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score3/10 -