Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3JaffaCakes...d6.exe
windows7-x64
7JaffaCakes...d6.exe
windows10-2004-x64
7$APPDATA/M...ild.sh
ubuntu-18.04-amd64
3$APPDATA/M...ild.sh
debian-9-armhf
3$APPDATA/M...ild.sh
debian-9-mips
3$APPDATA/M...ild.sh
debian-9-mipsel
3$APPDATA/M...ild.sh
ubuntu-18.04-amd64
$APPDATA/M...ild.sh
debian-9-armhf
$APPDATA/M...ild.sh
debian-9-mips
$APPDATA/M...ild.sh
debian-9-mipsel
$APPDATA/M...lid.js
windows7-x64
3$APPDATA/M...lid.js
windows10-2004-x64
3$APPDATA/M...lay.js
windows7-x64
3$APPDATA/M...lay.js
windows10-2004-x64
3$APPDATA/M...oad.js
windows7-x64
3$APPDATA/M...oad.js
windows10-2004-x64
3$APPDATA/M...oad.js
windows7-x64
3$APPDATA/M...oad.js
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/fct.dll
windows7-x64
3$PLUGINSDIR/fct.dll
windows10-2004-x64
3$PLUGINSDIR/inetc.dll
windows7-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
3VFDInstall.exe
windows7-x64
6VFDInstall.exe
windows10-2004-x64
6bho_project.dll
windows7-x64
6bho_project.dll
windows10-2004-x64
6chromeaddo...ded.js
windows7-x64
3chromeaddo...ded.js
windows10-2004-x64
3chromeaddo...d.html
windows7-x64
3chromeaddo...d.html
windows10-2004-x64
3Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
25/01/2025, 02:55
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_2793cb025fbd21dbfb9baa7d31639cd6.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_2793cb025fbd21dbfb9baa7d31639cd6.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/build.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral4
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/build.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral5
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/build.sh
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral6
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/build.sh
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral7
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/config_build.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral8
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/config_build.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral9
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/config_build.sh
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral10
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/config_build.sh
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral11
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/content/installid.js
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/content/installid.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/content/overlay.js
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/content/overlay.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/content/vfdownload.js
Resource
win7-20241023-en
Behavioral task
behavioral16
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/content/vfdownload.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/defaults/preferences/vfdownload.js
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/defaults/preferences/vfdownload.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/fct.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/fct.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/inetc.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
VFDInstall.exe
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
VFDInstall.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
bho_project.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
bho_project.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
chromeaddon/._included.js
Resource
win7-20241010-en
Behavioral task
behavioral30
Sample
chromeaddon/._included.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
chromeaddon/background.html
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
chromeaddon/background.html
Resource
win10v2004-20241007-en
General
-
Target
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/content/overlay.js
-
Size
309B
-
MD5
736c4e05b326e15dd6e496b8ed2af8c6
-
SHA1
a7f2862e47619a0ba8c1e0285c3f2dccae3683b6
-
SHA256
1fac0ed464192eaf5cf34d34b7aa6bdd40bfcaface36a11919c5fd5da033e9fd
-
SHA512
470002faa5bdee3b3c3955d8023f709f5e56a7e8db061c127a4f7f73527b03fe20fac4832d8fbd186178856a0e53e4f131de08cece7a22f992c3f663bc035115
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\$APPDATA\Mozilla\Firefox\$R0\extensions\[email protected]\content\overlay.js1⤵PID:2072