Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

3a0cc87f88...18.exe

windows7-x64

7

3a0cc87f88...18.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

DsSearchBar.exe

windows7-x64

3

DsSearchBar.exe

windows10-2004-x64

3

SQLiteEncrypt.dll

windows7-x64

3

SQLiteEncrypt.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a0cc87f88e404947e488d7c85042d33_JaffaCakes118

  • Size

    638KB

  • Sample

    241012-ptr2rs1bjh

  • MD5

    3a0cc87f88e404947e488d7c85042d33

  • SHA1

    83bce3d2221f893beda8e58df1bc41888cc6913a

  • SHA256

    a35b0a9b808cf9c4db3d41cfad17af1f9f999494ca7bdde7f6cf3aadfb6ad14e

  • SHA512

    528765ea68c4d78799565f4b3b524062589781d1de3ca4e125f94bf43414304eaa61b8b28db3db4af675b90aab4718a38ee8d89da90909563e4209fc4b510236

  • SSDEEP

    12288:QFJUoL3GhLslDX7xG32NUkz0tOfd80PPXIKYYGZ1unbukJP:QFrLGNs5X7xE2NUkztfd8O/IfDunSkp

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      3a0cc87f88e404947e488d7c85042d33_JaffaCakes118

    • Size

      638KB

    • MD5

      3a0cc87f88e404947e488d7c85042d33

    • SHA1

      83bce3d2221f893beda8e58df1bc41888cc6913a

    • SHA256

      a35b0a9b808cf9c4db3d41cfad17af1f9f999494ca7bdde7f6cf3aadfb6ad14e

    • SHA512

      528765ea68c4d78799565f4b3b524062589781d1de3ca4e125f94bf43414304eaa61b8b28db3db4af675b90aab4718a38ee8d89da90909563e4209fc4b510236

    • SSDEEP

      12288:QFJUoL3GhLslDX7xG32NUkz0tOfd80PPXIKYYGZ1unbukJP:QFrLGNs5X7xE2NUkztfd8O/IfDunSkp

    Score
    7/10
    discoverypersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      44KB

    • MD5

      3599d30554ad65dc29fc689217d2152e

    • SHA1

      8f5fcc313b667a1de2d56573bcf98d43fd0d4ff9

    • SHA256

      1af3ac7d3176af42e8594ba0c33821d3318f4eea5cbb799bf8fab58e480efe0e

    • SHA512

      846776b1d908b5204667715ffdfd3a6c76dface1677e8b1e5156ceac2ef0a739f68b48ccbb919c9e08d6ff359a93174bf0b90def7d48cee54cd3c41d8d8575f2

    • SSDEEP

      768:oY6+2hD1lu3SFh80Z9pe7nJRJ3QN8DOUVowlo+J:76xhZlM0h/9panJ73CSFl

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      DsSearchBar.exe

    • Size

      469KB

    • MD5

      a6d1ee51c54f577b7ddd893a54c2cfd4

    • SHA1

      492fa06039abc599e8e6264e4c7dffb98c291717

    • SHA256

      bedcb1aae5914cdde62171bc6349bb872d5c4e61b9e0ccd9193a1dbaddfb83a9

    • SHA512

      d5d9d01cf6bee25db4832d239dc54c93a3163d97ee436f1036933afd3fd5ebfc9526fe50a091357c53c44d7111d131ab67e22a18a262b94cea94096757fe57a7

    • SSDEEP

      12288:AKGDGs71xOWukC0UNZZyJJ4t/e6GY/s0WNN2P/:xGqu1xOUC0UP/TDf

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      SQLiteEncrypt.dll

    • Size

      517KB

    • MD5

      419730a6bf79d5622fbc41eafc0ef059

    • SHA1

      3a5bf8f32101f1b681b2b0a548541ad383a1db42

    • SHA256

      5961a9034395f84ff4c320e30fa675624ba9f798d1a1f81443396a851062c579

    • SHA512

      1a612160b2660fe634bfbc931675555900975ab5aad03334cd8d111922d54bbc48b9d9bec70aa16cf1574f76064cfa0b1d6a4a71b9880667e372e02bbd27115d

    • SSDEEP

      12288:CHQQEuaVa1j3j8rXvaabQXzaBA2TjE/Qpt0E3/9:CHQ3VaRj8zpbQXzaBZjOG

    Score
    3/10
    discovery
    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks