Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
72d0145493f...5f.zip
windows7-x64
12d0145493f...5f.zip
windows10-2004-x64
12d0145493f...5f.apk
android-9-x86
1.jgapp
windows7-x64
3.jgapp
windows10-2004-x64
3GoogleSans...ar.ttf
windows7-x64
3GoogleSans...ar.ttf
windows10-2004-x64
7config.json
windows7-x64
3config.json
windows10-2004-x64
3easyagent.apk
android-9-x86
1easyagent.apk
android-10-x64
1easyagent.apk
android-11-x64
1ectemplate
windows7-x64
1ectemplate
windows10-2004-x64
1ecurl.dat
windows7-x64
3ecurl.dat
windows10-2004-x64
3index.html
windows7-x64
1index.html
windows10-2004-x64
1libjiagu.so
debian-9-armhf
1supplierconfig.json
windows7-x64
3supplierconfig.json
windows10-2004-x64
3vers.dat
windows7-x64
3vers.dat
windows10-2004-x64
3Analysis
-
max time kernel
117s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
24/07/2023, 07:40
Static task
static1
Behavioral task
behavioral1
Sample
2d0145493ff634b9a1430bdd0c7e6a6abe6f853609086c07d2bcfbec4d0abe5f.zip
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2d0145493ff634b9a1430bdd0c7e6a6abe6f853609086c07d2bcfbec4d0abe5f.zip
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
2d0145493ff634b9a1430bdd0c7e6a6abe6f853609086c07d2bcfbec4d0abe5f.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral4
Sample
.jgapp
Resource
win7-20230712-en
Behavioral task
behavioral5
Sample
.jgapp
Resource
win10v2004-20230703-en
Behavioral task
behavioral6
Sample
GoogleSans-Regular.ttf
Resource
win7-20230712-en
Behavioral task
behavioral7
Sample
GoogleSans-Regular.ttf
Resource
win10v2004-20230703-en
Behavioral task
behavioral8
Sample
config.json
Resource
win7-20230712-en
Behavioral task
behavioral9
Sample
config.json
Resource
win10v2004-20230703-en
Behavioral task
behavioral10
Sample
easyagent.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral11
Sample
easyagent.apk
Resource
android-x64-20230621-en
Behavioral task
behavioral12
Sample
easyagent.apk
Resource
android-x64-arm64-20230621-en
Behavioral task
behavioral13
Sample
ectemplate
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
ectemplate
Resource
win10v2004-20230703-en
Behavioral task
behavioral15
Sample
ecurl.dat
Resource
win7-20230712-en
Behavioral task
behavioral16
Sample
ecurl.dat
Resource
win10v2004-20230703-en
Behavioral task
behavioral17
Sample
index.html
Resource
win7-20230712-en
Behavioral task
behavioral18
Sample
index.html
Resource
win10v2004-20230703-en
Behavioral task
behavioral19
Sample
libjiagu.so
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral20
Sample
supplierconfig.json
Resource
win7-20230712-en
Behavioral task
behavioral21
Sample
supplierconfig.json
Resource
win10v2004-20230703-en
Behavioral task
behavioral22
Sample
vers.dat
Resource
win7-20230712-en
Behavioral task
behavioral23
Sample
vers.dat
Resource
win10v2004-20230703-en
General
-
Target
GoogleSans-Regular.ttf
-
Size
117KB
-
MD5
b5c77a6aed75cdad9489effd0d5ea411
-
SHA1
4974453e73089c1d8bcf2a6b5eeff51302da45ec
-
SHA256
974ee8402aed7391f8ed35155db12950697bcbbe3ad01abfb81718b65cb1960d
-
SHA512
31f53e9a2803bb42ca6dbc69cae9dbf9de53a91db9cb32bac6c6ab9d0350639a21a22b8c193badba4be8747f2a76c14c12333f6114c5150d1ca53f36b7f7b4b3
-
SSDEEP
1536:NVSyKxWDcIViZH+XcRF7U4QR8lY/f6GeG4AmDFXQPt:WyKMYH2IUVagl
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2504 wrote to memory of 2844 2504 cmd.exe 29 PID 2504 wrote to memory of 2844 2504 cmd.exe 29 PID 2504 wrote to memory of 2844 2504 cmd.exe 29