Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

5

3f72f13b6e...18.exe

windows7-x64

3

3f72f13b6e...18.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

Alawar.url

windows7-x64

6

Alawar.url

windows10-2004-x64

3

HTMLayout.dll

windows7-x64

3

HTMLayout.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3f72f13b6e2369b55ab89ee2cdfadc67_JaffaCakes118

  • Size

    9.1MB

  • Sample

    241013-mz7y3axfjj

  • MD5

    3f72f13b6e2369b55ab89ee2cdfadc67

  • SHA1

    d94403a6b06a6051dfe557b48a2cd0b2280cca78

  • SHA256

    812d454fdc3b18421f6fd74ab9d1574e7be731b442fd956826c14548845ab0fc

  • SHA512

    f0d7ac847f20d75241098d58f99262c50d66377d76c02340d8caa298264f198cfbabbd5dcfc2278c34c1f9b8614822f6fa17c253e0fba114f19ce088c5b587c8

  • SSDEEP

    196608:Ai43FcI+2Pof43X+NNe0mitWbjjqT4y2U50rpozEBDHm44t+syg0VM9hy:tkcI+1f6XSmitwiT4Eiv5GvbA+hy

Score
6/10
discoveryevasiontrojanupx

Malware Config

Targets

    • Target

      3f72f13b6e2369b55ab89ee2cdfadc67_JaffaCakes118

    • Size

      9.1MB

    • MD5

      3f72f13b6e2369b55ab89ee2cdfadc67

    • SHA1

      d94403a6b06a6051dfe557b48a2cd0b2280cca78

    • SHA256

      812d454fdc3b18421f6fd74ab9d1574e7be731b442fd956826c14548845ab0fc

    • SHA512

      f0d7ac847f20d75241098d58f99262c50d66377d76c02340d8caa298264f198cfbabbd5dcfc2278c34c1f9b8614822f6fa17c253e0fba114f19ce088c5b587c8

    • SSDEEP

      196608:Ai43FcI+2Pof43X+NNe0mitWbjjqT4y2U50rpozEBDHm44t+syg0VM9hy:tkcI+1f6XSmitwiT4Eiv5GvbA+hy

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      7e49eb67f1f3c62bb8c4b0a868b30645

    • SHA1

      2be42e3c6059485bc3b624a537ab1fb36a10a263

    • SHA256

      17f0946e0847bbaa6a06eb58aead13fce22a8606e9b3744cd2241debdf8d8bae

    • SHA512

      469c28b6da5b9499fd417f8cd74414d6c6edcbe6567eecc9421a69797a77ec323936deb96cd151611da57e311074ec0c56d82a9800d7aebac9538a947284ff9e

    • SSDEEP

      192:/6JaVGQ+xI5EeuyvMmGpeWH2J5xprN+AxTSK72dwF7dBdcQOz:/6JaVh4I5rpPbTS+BdhO

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/StartMenu.dll

    • Size

      7KB

    • MD5

      e2a32b7677bc80f6e71e42ec5a2753cc

    • SHA1

      7856bebedba259040c4d7c4a07deda1c425934af

    • SHA256

      547c8edb38bf227afe084562f9fe6e82d13ab17650adf3a3dd5460aea928e9ef

    • SHA512

      bfa8b7d22f7df34a4a31650a138a4ac7f323fbc74b2bb68203a1cd3c7936a5183e79727816c00ebb429f775ac06a3a26b81a8a482fd550d0253fc407bd480daf

    • SSDEEP

      96:Z++BC0x22epxPEvC4FkWE+in1/FMvsCGRfRFqCB5t4GhEl5VN:Z+2epxPE1r8/FtmCDt3g5v

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      Alawar.url

    • Size

      125B

    • MD5

      e0ebfcdb23bfa6e70a5d0792634ee2c6

    • SHA1

      d6ea809a3c554306da15ebb8755e3bf7fff1453f

    • SHA256

      5817754744505a1c67f9105ae584cb6da7eb386a731ebf06f544e92b1212b879

    • SHA512

      d9dcc26f51e221881a56972c9f8454e6f1966638336231fa1963c29be4465d3b04ba6857b36899fb325d2004ddf4270201776ea6e092ea80b9026706d1801b8c

    Score
    6/10
    discoveryevasiontrojan
    behavioral7behavioral8

    • Target

      HTMLayout.dll

    • Size

      61KB

    • MD5

      bd9a082b0e2cdcae0ef411c2e0b884e2

    • SHA1

      1605d3e4d22519f34617b5c9c4c8d264adf1574d

    • SHA256

      0a513706d1653580fd5e4b39c29c1cf243c0de67238eca311775b5560ac9e5d7

    • SHA512

      858322e8a36b6c4295ab0472237865d026ebdfaa48892000dc3f248106369a053e1a149f4cb93cbdad7380b1440b2430b5d5c0c9eca166e6e40fb58353af40b6

    • SSDEEP

      1536:gChso4vxwM+Wrf7v5F6tp7GPM9ljrwTVumpCwxR9WnvrJijAx2jic:gLXQ8j4p7GPMffwBu8dMcjic

    Score
    3/10
    discovery
    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks