Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

3b2ed20814...18.exe

windows7-x64

7

3b2ed20814...18.exe

windows10-2004-x64

7

$PLUGINSDI...ff.dll

windows7-x64

3

$PLUGINSDI...ff.dll

windows10-2004-x64

3

$PLUGINSDI...lp.dll

windows7-x64

3

$PLUGINSDI...lp.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ON.dll

windows7-x64

5

$PLUGINSDI...ON.dll

windows10-2004-x64

5

DownLite.exe

windows7-x64

3

DownLite.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b2ed208145a422ff43db902fc641f57_JaffaCakes118

  • Size

    2.2MB

  • Sample

    241012-vr6d9swdlj

  • MD5

    3b2ed208145a422ff43db902fc641f57

  • SHA1

    d730a130720bebe6d88dc07f128b881c4c908e85

  • SHA256

    4a8b90600201990378161adf50d45fbe22be6526298eb607e55d5266840ec5c8

  • SHA512

    9d621a6cc433a90744edca9e0efbe607e68fdc75c654db03c633dbb825bd8433c6a1cee1041448d5107f4a77bd73eab8f702832da5355915504e8f5440309331

  • SSDEEP

    49152:A1k8wgkTwBr2XXX5SXv0WpMKrHvbb5NbO95xN1bhznAcrthlt:A1k8VO82XH5CMYMqjO97vbNnLlt

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      3b2ed208145a422ff43db902fc641f57_JaffaCakes118

    • Size

      2.2MB

    • MD5

      3b2ed208145a422ff43db902fc641f57

    • SHA1

      d730a130720bebe6d88dc07f128b881c4c908e85

    • SHA256

      4a8b90600201990378161adf50d45fbe22be6526298eb607e55d5266840ec5c8

    • SHA512

      9d621a6cc433a90744edca9e0efbe607e68fdc75c654db03c633dbb825bd8433c6a1cee1041448d5107f4a77bd73eab8f702832da5355915504e8f5440309331

    • SSDEEP

      49152:A1k8wgkTwBr2XXX5SXv0WpMKrHvbb5NbO95xN1bhznAcrthlt:A1k8VO82XH5CMYMqjO97vbNnLlt

    Score
    7/10
    discoveryupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallerStuff.dll

    • Size

      115KB

    • MD5

      b506d349c4089079ab758ec5dfe2f512

    • SHA1

      3584cbbd56291738cf991845b893f985ab57ddd8

    • SHA256

      98cc6a88f1e05d41946e26c84bc75d3be32d4706783d23ee9a66cb563b5b785f

    • SHA512

      8f2841387f8e2990841c594228294eab16fd637dc72493e903c37a4575a60041aa2c3cb42b6b75db31a0c270fa71a0029bf8ce0629374972ba59fd7ac485a530

    • SSDEEP

      1536:aF/lMOy6cWef0K9CWGHyAkeW2Km+odcI9sWjcdQlBDe4p4iq5:+lMnTIpSAkeum+oe4BDe4p4ii

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/OCSetupHlp.dll

    • Size

      848KB

    • MD5

      9e4e850e12f2f4f869b2491dbbb17ceb

    • SHA1

      bd89581a89604b601c817ea680c2a224b46737f8

    • SHA256

      4d1ad8aaf803660ee9d989a8a9cb3129397a97e4d0fa4b50ba7fb700b9d4d7b6

    • SHA512

      9285472e8ed2e685dce357383842356e3011110a09f2e66b2a34ee6bf3c7457dbba834256d8b9b240c20666ec38b62d0ebd7fe4dec1fd9cbb812adc36ad724f5

    • SSDEEP

      12288:w3RHConJZh6lVfdxrHtgFl2nMLlKT2OIPL8mKqSTSTpz4cB8:wkuMV1xrHaF8nMI2RPL8STpz4cB8

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      c10e04dd4ad4277d5adc951bb331c777

    • SHA1

      b1e30808198a3ae6d6d1cca62df8893dc2a7ad43

    • SHA256

      e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a

    • SHA512

      853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e

    • SSDEEP

      96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/nsJSON.dll

    • Size

      6KB

    • MD5

      292aa9f95a7f081625056c497078159a

    • SHA1

      72076f3eb146ab7ea2b3dd0ef6a63c06f86d64f1

    • SHA256

      18f2b2f20c65a022a1c8aaf776b4c9be6c193b73c2079d9d65d56b802fcadfb5

    • SHA512

      87f83c3bbcfedd98364b5d0209f912e66c72d43eb887438ad9735c078e6d1f6ea12566a75f0b652602bbd9f0608ce7148dc1703821f2ab6b366f061b8a58d910

    • SSDEEP

      96:u2r8Z0x0OOG+2tOgdC+qzf+Sdv9wMxOHKCt6qZZLAL5EICN9r7HcnrDn:uHI+2e9zf++viMot6qZFYEIC7jcrL

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral11behavioral12

    • Target

      DownLite.exe

    • Size

      2.1MB

    • MD5

      84d44cc04348df5226b733eba1b64eb6

    • SHA1

      3cc6d1a7aa6dcccf665c0c777af596d551fd953a

    • SHA256

      7126b3a28108726ee7d07024bce3611ed2d68f7fe75494124a04b9314488e605

    • SHA512

      40f11d74b158188b5d948d014ee82d70bd1b4a78710d7e596f961dd13fe212e6435ce2069ff4f483be3d8d23f8bf4fe478264b1c90f840660fcf4f7e0ded24b5

    • SSDEEP

      49152:0gSxAEDE727h0VKMPh3UWUZQLamNg5/U6l:Q82zMPh3bUqamWc6l

    Score
    3/10
    discovery
    behavioral13behavioral14

MITRE ATT&CK Enterprise v15

Tasks