Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3bdd602693f225d251e6b47d908a245f_JaffaCakes118

  • Size

    4.0MB

  • Sample

    241012-y4l3yatdrk

  • MD5

    3bdd602693f225d251e6b47d908a245f

  • SHA1

    63be90abe4e6a99c8be860cdbc099ac9f54db4fd

  • SHA256

    79ae14d993fdfc363514fada8e1aebe71eaf0ef8d80901ac2cf3cfc7e02c8c30

  • SHA512

    cef12fe61bae06c866c5ff49d4f2f46da5f6e5a7163dabe3e66bdcd5d9841a87240eae46c161a395c6708fa572302b3e200ce018d26350b8a948ed2e7662b007

  • SSDEEP

    98304:R+jottIc6ZPPaBD2bJOJNXW/MfNpcSv1eo/srOCDoMJQ9mzF:R7NeaBwM18Kv1eo/srZD7QS

Score
7/10

Malware Config

Targets

    • Target

      3bdd602693f225d251e6b47d908a245f_JaffaCakes118

    • Size

      4.0MB

    • MD5

      3bdd602693f225d251e6b47d908a245f

    • SHA1

      63be90abe4e6a99c8be860cdbc099ac9f54db4fd

    • SHA256

      79ae14d993fdfc363514fada8e1aebe71eaf0ef8d80901ac2cf3cfc7e02c8c30

    • SHA512

      cef12fe61bae06c866c5ff49d4f2f46da5f6e5a7163dabe3e66bdcd5d9841a87240eae46c161a395c6708fa572302b3e200ce018d26350b8a948ed2e7662b007

    • SSDEEP

      98304:R+jottIc6ZPPaBD2bJOJNXW/MfNpcSv1eo/srOCDoMJQ9mzF:R7NeaBwM18Kv1eo/srZD7QS

    Score
    7/10
    • Loads dropped DLL

    • Target

      $PLUGINSDIR/Base64.dll

    • Size

      4KB

    • MD5

      f0e3845fefd227d7f1101850410ec849

    • SHA1

      3067203fafd4237be0c186ddab7029dfcbdfb53e

    • SHA256

      7c688940e73022bf526f07cc922a631a1b1db78a19439af6bafbff2a3b46d554

    • SHA512

      584ae5a0d1c1639ba4e2187d0c8a0ac7e54c0be0a266029c4689d81c0c64a7f80e7d918da0df5c6344f9f7a114f30d8f2feda253b29e813bae086604731a3d8a

    • SSDEEP

      48:SxSrr7xd14m4bLKwvnvcfDw1hEiauGkDVK+hIg4qT9/3lt:zr7xd14m4qw/vGwrEickDVthcE/

    Score
    3/10
    • Target

      $PLUGINSDIR/BrandingURL.dll

    • Size

      4KB

    • MD5

      71c46b663baa92ad941388d082af97e7

    • SHA1

      5a9fcce065366a526d75cc5ded9aade7cadd6421

    • SHA256

      bb2b9c272b8b66bc1b414675c2acba7afad03fff66a63babee3ee57ed163d19e

    • SHA512

      5965bd3f5369b9a1ed641c479f7b8a14af27700d0c27d482aa8eb62acc42f7b702b5947d82f9791b29bcba4d46e1409244f0a8ddce4ec75022b5e27f6d671bce

    Score
    3/10
    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      0dc0cc7a6d9db685bf05a7e5f3ea4781

    • SHA1

      5d8b6268eeec9d8d904bc9d988a4b588b392213f

    • SHA256

      8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

    • SHA512

      814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

    • SSDEEP

      192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo

    Score
    3/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    • Target

      $PLUGINSDIR/blowfish.dll

    • Size

      22KB

    • MD5

      5afd4a9b7e69e7c6e312b2ce4040394a

    • SHA1

      fbd07adb3f02f866dc3a327a86b0f319d4a94502

    • SHA256

      053b4487d22aacf8274bab448ae1d665fe7926102197b47bfba6c7ed5493b3ae

    • SHA512

      f78efe9d1fa7d2ffc731d5f878f81e4dcbfaf0c561fdfbf4c133ba2ce1366c95c4672d67cae6a8bd8fcc7d04861a9da389d98361055ac46fc9793828d9776511

    • SSDEEP

      384:yTxz0Cv0hqd+1TjQmd9YWrSUEc//////OD5hF92IJpJgLa0MpoYfAz6S:jCvsqdS3QGBREc//////Q53NgLa1ub

    Score
    3/10
    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      20KB

    • MD5

      50fdadda3e993688401f6f1108fabdb4

    • SHA1

      04a9ae55d0fb726be49809582cea41d75bf22a9a

    • SHA256

      6d6ddc0d2b7d59eb91be44939457858ced5eb23cf4aa93ef33bb600eb28de6f6

    • SHA512

      e9628870feea8c3aaefe22a2af41cf34b1c1778c4a0e81d069f50553ce1a23f68a0ba74b296420b2be92425d4995a43e51c018c2e8197ec2ec39305e87c56be8

    • SSDEEP

      384:jQB2ZUVHUxgoJX0eBA6PcH85db+ya9cC0Ac9khYLMkIX0+G5xgZmT+m//a:j/UFeJ5S6PHLNa9cFam/

    Score
    3/10
    • Target

      3g2.dll

    • Size

      12KB

    • MD5

      0896363ce674760717cefef04a4ea8a7

    • SHA1

      2cc53435078ee2ac7661ff773c1638de5cea859e

    • SHA256

      819b9fa3b169972a7ea2a6cd13e978c74dda70fe88179a7ae8a599dfb893bcf3

    • SHA512

      444dccad62d66f2982ac234bd59f823a42c898af9df5abaf10ea5c11a02e2d286d33d052b151223de14215b4c1cf309fb32f8cbd831b0dd3c4eaecdc430dad45

    • SSDEEP

      192:9rKqMXF+C7gUa9TGEL/dNi9XLd/W3X6rqQSAFnyMTCVzZg2Y4RSee:9rKJX97gF96Y2Ld/qKjMMSz/0ee

    Score
    3/10
    • Target

      3g2plus.dll

    • Size

      12KB

    • MD5

      0896363ce674760717cefef04a4ea8a7

    • SHA1

      2cc53435078ee2ac7661ff773c1638de5cea859e

    • SHA256

      819b9fa3b169972a7ea2a6cd13e978c74dda70fe88179a7ae8a599dfb893bcf3

    • SHA512

      444dccad62d66f2982ac234bd59f823a42c898af9df5abaf10ea5c11a02e2d286d33d052b151223de14215b4c1cf309fb32f8cbd831b0dd3c4eaecdc430dad45

    • SSDEEP

      192:9rKqMXF+C7gUa9TGEL/dNi9XLd/W3X6rqQSAFnyMTCVzZg2Y4RSee:9rKJX97gF96Y2Ld/qKjMMSz/0ee

    Score
    3/10
    • Target

      3gp.dll

    • Size

      12KB

    • MD5

      0896363ce674760717cefef04a4ea8a7

    • SHA1

      2cc53435078ee2ac7661ff773c1638de5cea859e

    • SHA256

      819b9fa3b169972a7ea2a6cd13e978c74dda70fe88179a7ae8a599dfb893bcf3

    • SHA512

      444dccad62d66f2982ac234bd59f823a42c898af9df5abaf10ea5c11a02e2d286d33d052b151223de14215b4c1cf309fb32f8cbd831b0dd3c4eaecdc430dad45

    • SSDEEP

      192:9rKqMXF+C7gUa9TGEL/dNi9XLd/W3X6rqQSAFnyMTCVzZg2Y4RSee:9rKJX97gF96Y2Ld/qKjMMSz/0ee

    Score
    3/10
    • Target

      3gpplus.dll

    • Size

      12KB

    • MD5

      a68a7fe555f5a05ecc3a2c2ad7d29bc9

    • SHA1

      ebb293fec1928e0ce13db2f8d0f0a30c1b7eaa50

    • SHA256

      2632601b48b0f99ad5a2d485144614271bf0016a8c5b85904e887ff46292fb1f

    • SHA512

      e772fec34d4df76aeddcec37be18122c6d5d9d96d006c4279269590432b3370b2339fc70a8795ec9bef44746144d7afc05d7318aaf9fc9f4ab7db7968f9b17c1

    • SSDEEP

      192:BrKqMXF+C7gUa9TGEL/dNi9XLd/W3X6rqQSAFnyMTCVzZg2Y4RSeB:BrKJX97gF96Y2Ld/qKjMMSz/0eB

    Score
    3/10
    • Target

      aac.dll

    • Size

      12KB

    • MD5

      a68a7fe555f5a05ecc3a2c2ad7d29bc9

    • SHA1

      ebb293fec1928e0ce13db2f8d0f0a30c1b7eaa50

    • SHA256

      2632601b48b0f99ad5a2d485144614271bf0016a8c5b85904e887ff46292fb1f

    • SHA512

      e772fec34d4df76aeddcec37be18122c6d5d9d96d006c4279269590432b3370b2339fc70a8795ec9bef44746144d7afc05d7318aaf9fc9f4ab7db7968f9b17c1

    • SSDEEP

      192:BrKqMXF+C7gUa9TGEL/dNi9XLd/W3X6rqQSAFnyMTCVzZg2Y4RSeB:BrKJX97gF96Y2Ld/qKjMMSz/0eB

    Score
    3/10
    • Target

      aacplus.dll

    • Size

      12KB

    • MD5

      a68a7fe555f5a05ecc3a2c2ad7d29bc9

    • SHA1

      ebb293fec1928e0ce13db2f8d0f0a30c1b7eaa50

    • SHA256

      2632601b48b0f99ad5a2d485144614271bf0016a8c5b85904e887ff46292fb1f

    • SHA512

      e772fec34d4df76aeddcec37be18122c6d5d9d96d006c4279269590432b3370b2339fc70a8795ec9bef44746144d7afc05d7318aaf9fc9f4ab7db7968f9b17c1

    • SSDEEP

      192:BrKqMXF+C7gUa9TGEL/dNi9XLd/W3X6rqQSAFnyMTCVzZg2Y4RSeB:BrKJX97gF96Y2Ld/qKjMMSz/0eB

    Score
    3/10
    • Target

      acdbase.dll

    • Size

      28KB

    • MD5

      e7343915fb18e960fad395c291aa8290

    • SHA1

      9f6ed2efdd2bfcbdd24e70699fe9b46d2cebd8b6

    • SHA256

      dc01444e8da2adf15186a74d279d473b59ae45d2623892e48926c5a5a0717d96

    • SHA512

      104e89e4a4bede43155809cd7522590afbebfef24dd9351cecc8839c143bba219268b3dfe8731a49df41ea23e312b18ee525744c406a75734bd37087aa0e9cd6

    • SSDEEP

      768:qwFL3XCwHVUbd//lEGKdAS4bOtMfcgSz/gej:qUbXCwHVUbd//lEGKdASyOtycg6YM

    Score
    3/10
    • Target

      adpcm.dll

    • Size

      19KB

    • MD5

      51b14430947b7f7bd45c5f1bc5e86702

    • SHA1

      977d5194707d13b1d44b35fe8cf337c36c837cd8

    • SHA256

      a50374dd28bd9860128a0e2219f26817a62f494e83b8caa068219c08ae5a2511

    • SHA512

      4c26bd8495bc83a54b6b17a5534c97e719a5f08926d79a4edfa3b4ff0aa733e69ee6b14da33752509768ebc00223aef85c72d7b2b511919c72b4a8e92bda23c1

    • SSDEEP

      384:5XNNKlZ5NMbhXeT9ZMYWa0jJiA2ZsOtuhOBLWMSz/LSG:V+j5NMJeBZMYAOsOtzBLtSz/d

    Score
    3/10
    • Target

      aiff.dll

    • Size

      38KB

    • MD5

      a17758f6a461bdfc4a25127c668a603a

    • SHA1

      8d4b745c69df2e64985aec0b412305e52db9abae

    • SHA256

      11dc4ca809bb3beee8ae772112b3e4eadbcaf1558f47c30088437538a7550c2b

    • SHA512

      503ca38162a0ef366432275cb1e84e20fbe69c7091a07ff345ebf892ed2c5268e6199c17d4875c073dd3115071788c6fdf406e5fad99a73b1d39d7824ab9b044

    • SSDEEP

      384:f5dtb5NM6CTkiwxXiuhW3dWgXMSz/Ua7f:f5P5CYiay/ASz/xf

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

discovery
Score
7/10

behavioral2

discovery
Score
7/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10