Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3JaffaCakes...d6.exe
windows7-x64
7JaffaCakes...d6.exe
windows10-2004-x64
7$APPDATA/M...ild.sh
ubuntu-18.04-amd64
3$APPDATA/M...ild.sh
debian-9-armhf
3$APPDATA/M...ild.sh
debian-9-mips
3$APPDATA/M...ild.sh
debian-9-mipsel
3$APPDATA/M...ild.sh
ubuntu-18.04-amd64
$APPDATA/M...ild.sh
debian-9-armhf
$APPDATA/M...ild.sh
debian-9-mips
$APPDATA/M...ild.sh
debian-9-mipsel
$APPDATA/M...lid.js
windows7-x64
3$APPDATA/M...lid.js
windows10-2004-x64
3$APPDATA/M...lay.js
windows7-x64
3$APPDATA/M...lay.js
windows10-2004-x64
3$APPDATA/M...oad.js
windows7-x64
3$APPDATA/M...oad.js
windows10-2004-x64
3$APPDATA/M...oad.js
windows7-x64
3$APPDATA/M...oad.js
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/fct.dll
windows7-x64
3$PLUGINSDIR/fct.dll
windows10-2004-x64
3$PLUGINSDIR/inetc.dll
windows7-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
3VFDInstall.exe
windows7-x64
6VFDInstall.exe
windows10-2004-x64
6bho_project.dll
windows7-x64
6bho_project.dll
windows10-2004-x64
6chromeaddo...ded.js
windows7-x64
3chromeaddo...ded.js
windows10-2004-x64
3chromeaddo...d.html
windows7-x64
3chromeaddo...d.html
windows10-2004-x64
3Analysis
-
max time kernel
117s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
25/01/2025, 02:55
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_2793cb025fbd21dbfb9baa7d31639cd6.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_2793cb025fbd21dbfb9baa7d31639cd6.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/build.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral4
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/build.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral5
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/build.sh
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral6
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/build.sh
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral7
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/config_build.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral8
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/config_build.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral9
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/config_build.sh
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral10
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/config_build.sh
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral11
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/content/installid.js
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/content/installid.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/content/overlay.js
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/content/overlay.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/content/vfdownload.js
Resource
win7-20241023-en
Behavioral task
behavioral16
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/content/vfdownload.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/defaults/preferences/vfdownload.js
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/defaults/preferences/vfdownload.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/fct.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/fct.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/inetc.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
VFDInstall.exe
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
VFDInstall.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
bho_project.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
bho_project.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
chromeaddon/._included.js
Resource
win7-20241010-en
Behavioral task
behavioral30
Sample
chromeaddon/._included.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
chromeaddon/background.html
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
chromeaddon/background.html
Resource
win10v2004-20241007-en
General
-
Target
$APPDATA/Mozilla/Firefox/$R0/extensions/[email protected]/defaults/preferences/vfdownload.js
-
Size
426B
-
MD5
c6720630e48853366fc0f73610619357
-
SHA1
b82c8b0e6673fc8248f9cd0a93c4c0f9111e8b9d
-
SHA256
02ba5dfc4f06b1fcde1d34dec1c0899489cc27f14e7692db99fd621b8c48f8a2
-
SHA512
54d41302833dc9455095e643f367460856838c4a8833825772c3dc432eeffec94563aa40725e48d6116967b8f441d4801681a6b45a373e897d6c945735c2afff
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\$APPDATA\Mozilla\Firefox\$R0\extensions\[email protected]\defaults\preferences\vfdownload.js1⤵PID:2168