Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

530937cb71...18.exe

windows7-x64

7

530937cb71...18.exe

windows10-2004-x64

7

$PLUGINSDI...MI.dll

windows7-x64

3

$PLUGINSDI...MI.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ex.dll

windows7-x64

3

$PLUGINSDI...ex.dll

windows10-2004-x64

3

$PLUGINSDI...on.dll

windows7-x64

5

$PLUGINSDI...on.dll

windows10-2004-x64

5

$TEMP/Helper.dll

windows7-x64

3

$TEMP/Helper.dll

windows10-2004-x64

3

$_42_/chro...ain.js

windows7-x64

3

$_42_/chro...ain.js

windows10-2004-x64

3

announce.js

windows7-x64

3

announce.js

windows10-2004-x64

3

background.html

windows7-x64

3

background.html

windows10-2004-x64

3

common.js

windows7-x64

3

common.js

windows10-2004-x64

3

contentscript.js

windows7-x64

3

contentscript.js

windows10-2004-x64

3

iframecont...ipt.js

windows7-x64

3

iframecont...ipt.js

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    530937cb71478ab5a790d31a8952cd07_JaffaCakes118

  • Size

    2.7MB

  • Sample

    241017-wyds9s1flp

  • MD5

    530937cb71478ab5a790d31a8952cd07

  • SHA1

    c69dd743af8e135f96ba7c2db6d115af6a62b233

  • SHA256

    8204c13c8893456a05472e907ac01d81786d0a3d8d89caa3c06e9b264713fc0d

  • SHA512

    bd72116565455abaf117502dd1f96c9f1c7e173bf07fba87c0b79fecb788d7256e8b30ac7a19bc14fb5b392e0193a07c0c777ad06b0dbbd062f8c5963e61d95e

  • SSDEEP

    49152:V6UrTrarOtpA+R8BOOwVw3h6SlCZ0OxJJlVt4OwpnlrEiorarOGWAfUOKLxCCr09:UCTrtA82XIamTlVqdllrEior1AQLJ4aY

Score
7/10
adwarediscoveryexecutionspywarestealerupx

Malware Config

Targets

    • Target

      530937cb71478ab5a790d31a8952cd07_JaffaCakes118

    • Size

      2.7MB

    • MD5

      530937cb71478ab5a790d31a8952cd07

    • SHA1

      c69dd743af8e135f96ba7c2db6d115af6a62b233

    • SHA256

      8204c13c8893456a05472e907ac01d81786d0a3d8d89caa3c06e9b264713fc0d

    • SHA512

      bd72116565455abaf117502dd1f96c9f1c7e173bf07fba87c0b79fecb788d7256e8b30ac7a19bc14fb5b392e0193a07c0c777ad06b0dbbd062f8c5963e61d95e

    • SSDEEP

      49152:V6UrTrarOtpA+R8BOOwVw3h6SlCZ0OxJJlVt4OwpnlrEiorarOGWAfUOKLxCCr09:UCTrtA82XIamTlVqdllrEior1AQLJ4aY

    Score
    7/10
    adwarediscoveryspywarestealerupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/KillProcWMI.dll

    • Size

      65KB

    • MD5

      61fd777443084ed61c05c22e8e3c3eff

    • SHA1

      607944fdcfad205a164f3ca84793ab13d3d4ba97

    • SHA256

      a69a51de19784287ee9031322cda5104a6025d7cdf1ffd0e897fdd8ce4e8df4b

    • SHA512

      ce12cc55088a2176bfc5de8b65b92db8def8e930ddffe3961bb855b9536a25632cd921903f616c885699fb2d00f5074d03a213e25a759ac0aa4ecdfc33878323

    • SSDEEP

      768:T975+8fnoagj2S6CPNgWUkayghQaEn5BTNkljCIoEDzMdnoezOQsmCALO8C:p75RfoaypW3QfnLTNklCjsmbLe

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      254f13dfd61c5b7d2119eb2550491e1d

    • SHA1

      5083f6804ee3475f3698ab9e68611b0128e22fd6

    • SHA256

      fd0e8be2135f3d326b65520383a3468c3983fa32c9c93594d986b16709d80f28

    • SHA512

      fcef8ac5bd0ee6e316dbbc128a223ba18c8bf85a8d253e0c0877af6a4f686a20b08d34e5a426e2be5045962b391b8073769253a4d9b18616febc8133ccf654f7

    • SSDEEP

      192:t5ZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRYgsfA:fBo/680dCI5adOjFOg9//p27uNw2bo

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/Processes.dll

    • Size

      35KB

    • MD5

      2cfba79d485cf441c646dd40d82490fc

    • SHA1

      83e51ac1115a50986ed456bd18729653018b9619

    • SHA256

      86b302fa9c85dfa0c1c03ba000864a928365dab571f3355347dba02da22949b7

    • SHA512

      cca186a7f9c5cff3f4eca410fbe8cc13dad2514a7e36aec9b1addfbcb239ace9b9b2d8427771858e3fd11783abce7e24d43c286f98da9f8b17562ca095a4c043

    • SSDEEP

      768:uxEiycFoaj/+WSiJfmjvab7L/cUf7IIlMLRF:uxEm7sgfmjy//cgdlM/

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      20KB

    • MD5

      3a3a9223dd834d9898fdd8bf260bc373

    • SHA1

      ec7ba0f20486cfb16bed7a2f8e62c228cb9f5e93

    • SHA256

      e36cdce05b8858cf6841db19f5618f9335aa67a9a59ffe8ec2be0fe83b5bb8cb

    • SHA512

      c8a4e07da6fe203f79f5c4314a6f5aa21b1a6648848bfa009a87b9af1d6c09ccf9c01ed3813442e57f7fa221ca088dbca236ea1bf80d033574c9670883d3611c

    • SSDEEP

      384:7bJ8gOGtWY9gOvkERQ1YwxdXpU+zUhU7ya4LB0Ac9khYLMkIX0+Gv8gcLo:7WgBtvDRCYwxd5fzUhUua4Lv

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      ab73c0c2a23f913eabdc4cb24b75cbad

    • SHA1

      6569d2863d54c88dcf57c843fc310f6d9571a41e

    • SHA256

      3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457

    • SHA512

      99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8

    • SSDEEP

      96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/util_ex.dll

    • Size

      776KB

    • MD5

      80b2e3d8a6a283c2019bf239a60cbbc5

    • SHA1

      a6b63dce1cb4741f443332a7ccb52031088918ee

    • SHA256

      cd564402cfe6744b2f9fe8df895fa9f30650c9061a4e4ec1bc71603ce1bc031d

    • SHA512

      c7c645939a5e237393958a75f39f7c9990116967aa9cc3388b7b14370ccca0c839f6579a56cf8bce08ba43ce847a0d6046a8a43730680e261a61ca0d401558c2

    • SSDEEP

      12288:gnpNIoldAkQzJ9JePTgiqmKW8wYfkFHR7QcVGMp8c6Gh+CA1bGk45NdwvG2:gfg9Ur+Wuc54MJ4CKGkgW

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/version.dll

    • Size

      6KB

    • MD5

      ebc5bb904cdac1c67ada3fa733229966

    • SHA1

      3c6abfa0ddef7f3289f38326077a5041389b15d2

    • SHA256

      3eba921ef649b71f98d9378dee8105b38d2464c9ccde37a694e4a0cd77d22a75

    • SHA512

      fa71afcc166093fbd076a84f10d055f5a686618711d053ab60d8bd060e78cb2fdc15fa35f363822c9913413251c718d01ddd6432ab128816d98f9aabf5612c9f

    • SSDEEP

      96:nPtMckE1e91BopVyXwUhn3f1I0vOKeoqO4d8QvS9:n1MMuOUhdI0c04yV9

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral17behavioral18

    • Target

      $TEMP/Helper.dll

    • Size

      884KB

    • MD5

      0c05804ee2737cdddec09f1ff9cfd418

    • SHA1

      8b675415e84c63ed246456bf0c010a89b2d1817d

    • SHA256

      9847a88d78d42d7ab1a3e39e5ffdf59229b60d99b23944125c8194ccca9c5a68

    • SHA512

      8db0889c5b6eaabe381e506bda9fd22f883b1325982c0215f28cde976db3a4c979bde1085b2e983b9334bde886c6a18cf492d51588dda038068a0bc5ca9065e8

    • SSDEEP

      12288:Alc+C/lUokasDC6H0rv+5oP+QosKQHQv3Wo5Zpsa8l7MMdw9Jxo:AlfC/lBkasDVXOP+Js7Hm3rNc7uJx

    Score
    3/10
    discovery
    behavioral19behavioral20

    • Target

      $_42_/chrome/content/main.js

    • Size

      17KB

    • MD5

      1e3eae817071ae7d680255ed86966ff4

    • SHA1

      c75d153750a1d4ce0518922b298b17cb8fc0a6c8

    • SHA256

      ddb6e4fe14a58a06ae543da34596171d492a6122649f6d01dda886205e893873

    • SHA512

      444ba911e05ab1b617f87af63006b60eb44728c5c3b53d92d75a4bd1ca9e65d13d1e62eab5a7f052e0815c9695d6a152b7387a3d54c2088be4ecd32bc0f7a588

    • SSDEEP

      384:DBwGCdh5T5xt2xOEWnrJYJjHpuyq2o/n3/HFB6Z0mBMp+7Z40CSP5zFS5iSJ+0Wk:DAdhZLt8OEWn18Tpuyq2in3/HW5ep+7E

    Score
    3/10
    execution
    behavioral21behavioral22

    • Target

      announce.js

    • Size

      383B

    • MD5

      f9b22790fe47d80a214c192d1034f60e

    • SHA1

      742a661cb82d28707b3e5ed297e3e3834dafb06a

    • SHA256

      a2dd7e64813177f4c3cedaf4991a8f6b68577a3e56fe17a5e57ec24db69ef1ac

    • SHA512

      d0e7fbfcf08545b022a8b5e6f2b426b327bb19faf76a4381affca1715714016a7942943eb6ecff877948336c22583b62066db4eb6d8c4dedc08de8718ad55303

    Score
    3/10
    execution
    behavioral23behavioral24

    • Target

      background.html

    • Size

      102B

    • MD5

      217a46404343dbe25a34dd731d741b97

    • SHA1

      48219413b2fafe169a052969d30a2eed43d9891a

    • SHA256

      0247278570472603063097649aab0eef51160de0d3a02c101151e57ce39c39ad

    • SHA512

      2ad67a5ca2ea0ee92ddd6a0f77b381170393b1cae091c1beb2a2b0f046d84fea2fe6edd4612fa260885a1cdfb0975e70d40161a9aa1e7036552e19a2f6fc35ab

    Score
    3/10
    discovery
    behavioral25behavioral26

    • Target

      common.js

    • Size

      23KB

    • MD5

      b0b4544dcce3b81dd1a19beb73a3f853

    • SHA1

      77ebecad460a0bb46ebc0320141008a408008dc1

    • SHA256

      d63ddb95a89dc6f5d72fe620449cfbaed845bba9904a0247b8fd3277d8c2822a

    • SHA512

      27515367804bd4f3fa00eceea2f30e9fc0567a03e24c771aea3e3eb636f60c38e2d631d740d7a75d1660aae83bf1c52a025387b6d82af477b46bbe8b13f85e69

    • SSDEEP

      384:q7g7Ga4t9RLwJqu/0yy8RjqsDOv3hEg8pxHlB+1FZTqYX:CdtbsJqEqEOv3hEg8pxFB4qw

    Score
    3/10
    execution
    behavioral27behavioral28

    • Target

      contentscript.js

    • Size

      12KB

    • MD5

      e0fcb7f1a416ae92613d865573d20784

    • SHA1

      6a178544f2fd51537a34047974167a8c2d421471

    • SHA256

      2fbec15a6f6bb98c010226f8be2fcff18808b0b1a9e9eb0f073d5cd282f94d9d

    • SHA512

      ebdf98cacff6eabd2b805b0fe1431803e9c3a041990350e24ebf44cc66e13e444a5d84b7ef5594aa055c5721486c4315e2cc396c45a60f6d8f56d756d18c2df5

    • SSDEEP

      384:Mp/KHhP8DCIaeHxisCB+u6OlhKaVVFcNreebrCTV64x37I9moooLk1:Mp/KHhPcCIaeHxisCB+u6OlhKaVVFc94

    Score
    3/10
    execution
    behavioral29behavioral30

    • Target

      iframecontentscript.js

    • Size

      2KB

    • MD5

      6b4a037a383f645e3f06f5fe8ab22866

    • SHA1

      4c31a76658528876aa18a7d09af333f65f214401

    • SHA256

      463410067419ed6efd03a4e83ae9bab1d881d342b74f0073e33cb8f2aaeae611

    • SHA512

      ff4eb7bd9df7d7011c9bf761e7000cd0536852c447c293dc49a7b86c8611098a4308e2ad176c58b9e5f9a44525a9370d07956c141f25fa3f9ca001c52edb306e

    Score
    3/10
    execution
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

upx
Score
7/10

behavioral1

adwarediscoveryspywarestealerupx
Score
7/10

behavioral2

adwarediscoveryspywarestealerupx
Score
7/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discoveryupx
Score
5/10

behavioral18

discoveryupx
Score
5/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10