Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3JaffaCakes...d6.exe
windows7-x64
7JaffaCakes...d6.exe
windows10-2004-x64
7$APPDATA/M...ild.sh
ubuntu-18.04-amd64
3$APPDATA/M...ild.sh
debian-9-armhf
3$APPDATA/M...ild.sh
debian-9-mips
3$APPDATA/M...ild.sh
debian-9-mipsel
3$APPDATA/M...ild.sh
ubuntu-18.04-amd64
$APPDATA/M...ild.sh
debian-9-armhf
$APPDATA/M...ild.sh
debian-9-mips
$APPDATA/M...ild.sh
debian-9-mipsel
$APPDATA/M...lid.js
windows7-x64
3$APPDATA/M...lid.js
windows10-2004-x64
3$APPDATA/M...lay.js
windows7-x64
3$APPDATA/M...lay.js
windows10-2004-x64
3$APPDATA/M...oad.js
windows7-x64
3$APPDATA/M...oad.js
windows10-2004-x64
3$APPDATA/M...oad.js
windows7-x64
3$APPDATA/M...oad.js
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/fct.dll
windows7-x64
3$PLUGINSDIR/fct.dll
windows10-2004-x64
3$PLUGINSDIR/inetc.dll
windows7-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
3VFDInstall.exe
windows7-x64
6VFDInstall.exe
windows10-2004-x64
6bho_project.dll
windows7-x64
6bho_project.dll
windows10-2004-x64
6chromeaddo...ded.js
windows7-x64
3chromeaddo...ded.js
windows10-2004-x64
3chromeaddo...d.html
windows7-x64
3chromeaddo...d.html
windows10-2004-x64
3Analysis
-
max time kernel
98s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
25/01/2025, 02:55
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_2793cb025fbd21dbfb9baa7d31639cd6.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_2793cb025fbd21dbfb9baa7d31639cd6.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/build.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral4
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/build.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral5
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/build.sh
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral6
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/build.sh
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral7
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/config_build.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral8
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/config_build.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral9
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/config_build.sh
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral10
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/config_build.sh
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral11
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/content/installid.js
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/content/installid.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/content/overlay.js
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/content/overlay.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/content/vfdownload.js
Resource
win7-20241023-en
Behavioral task
behavioral16
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/content/vfdownload.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/defaults/preferences/vfdownload.js
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/defaults/preferences/vfdownload.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/fct.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/fct.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/inetc.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
VFDInstall.exe
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
VFDInstall.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
bho_project.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
bho_project.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
chromeaddon/._included.js
Resource
win7-20241010-en
Behavioral task
behavioral30
Sample
chromeaddon/._included.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
chromeaddon/background.html
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
chromeaddon/background.html
Resource
win10v2004-20241007-en
General
-
Target
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/content/installid.js
-
Size
217B
-
MD5
b8b91a4970839c300a48d933527212f6
-
SHA1
58fc3b8bfa80e99adea483b9860f24dce1e3c81f
-
SHA256
8287eb661753f3c2602dc3dda8973727cf1c00e2d193ae0829ead7bee3011f35
-
SHA512
a72f32a54e733c1c10fb3b1762c9a84c8b84a976c1bde8d4d764a73cdc9733961f923c83473599b6315b462f943f4ddaf03104e332e5d99429123cdb75be505d
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\$APPDATA\Mozilla\Firefox\$R0\extensions\[email protected]\content\installid.js1⤵PID:2432