Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
7SHAREit_Pr...OD.apk
android-9-x86
6Home.html
windows7-x64
1Home.html
windows10-2004-x64
1WebShare_JIO.html
windows7-x64
1WebShare_JIO.html
windows10-2004-x64
1chunk-vendors.js
windows7-x64
1chunk-vendors.js
windows10-2004-x64
1client.html
windows7-x64
1client.html
windows10-2004-x64
1client.js
windows7-x64
1client.js
windows10-2004-x64
1default/index.html
windows7-x64
1default/index.html
windows10-2004-x64
1online.html
windows7-x64
1online.html
windows10-2004-x64
1shareit_go...x.html
windows7-x64
1shareit_go...x.html
windows10-2004-x64
1shareit_go...0e6.js
windows7-x64
1shareit_go...0e6.js
windows10-2004-x64
1shareit_go...7bd.js
windows7-x64
1shareit_go...7bd.js
windows10-2004-x64
1Analysis
-
max time kernel
143s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
14/10/2023, 03:28
Static task
static1
Behavioral task
behavioral1
Sample
SHAREit_Premium_v1.1.48_MOD.apk
Resource
android-x86-arm-20230831-en
Behavioral task
behavioral2
Sample
Home.html
Resource
win7-20230831-en
Behavioral task
behavioral3
Sample
Home.html
Resource
win10v2004-20230915-en
Behavioral task
behavioral4
Sample
WebShare_JIO.html
Resource
win7-20230831-en
Behavioral task
behavioral5
Sample
WebShare_JIO.html
Resource
win10v2004-20230915-en
Behavioral task
behavioral6
Sample
chunk-vendors.js
Resource
win7-20230831-en
Behavioral task
behavioral7
Sample
chunk-vendors.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral8
Sample
client.html
Resource
win7-20230831-en
Behavioral task
behavioral9
Sample
client.html
Resource
win10v2004-20230915-en
Behavioral task
behavioral10
Sample
client.js
Resource
win7-20230831-en
Behavioral task
behavioral11
Sample
client.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral12
Sample
default/index.html
Resource
win7-20230831-en
Behavioral task
behavioral13
Sample
default/index.html
Resource
win10v2004-20230915-en
Behavioral task
behavioral14
Sample
online.html
Resource
win7-20230831-en
Behavioral task
behavioral15
Sample
online.html
Resource
win10v2004-20230915-en
Behavioral task
behavioral16
Sample
shareit_gobang/index.html
Resource
win7-20230831-en
Behavioral task
behavioral17
Sample
shareit_gobang/index.html
Resource
win10v2004-20230915-en
Behavioral task
behavioral18
Sample
shareit_gobang/js/app.a6f290e6.js
Resource
win7-20230831-en
Behavioral task
behavioral19
Sample
shareit_gobang/js/app.a6f290e6.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral20
Sample
shareit_gobang/js/chunk-vendors.c7ff87bd.js
Resource
win7-20230831-en
Behavioral task
behavioral21
Sample
shareit_gobang/js/chunk-vendors.c7ff87bd.js
Resource
win10v2004-20230915-en
General
-
Target
shareit_gobang/js/app.a6f290e6.js
-
Size
27KB
-
MD5
a061e5443df54491b139f706eee4f90c
-
SHA1
b072ea1fc1f93fedf81d49485df386666cbb5374
-
SHA256
c3ddd57566b66392233ea72a5f58b7ca338fd79f798c331bde64785a153926f0
-
SHA512
f431a94aad2ddae7db1f0d4a2f1fd81153787db5ef0c7fa5a9d9736246e3f22dee16cd4896f3974aadcab0928bd205fdfcc032aa2882a569bf4a8bbf5132b485
-
SSDEEP
768:SxIdnXf1QFC1uYHyKrXyszyUa5QOmdTkvJjZ:SCPz1fHyKrCkYmdT6J9
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeManageVolumePrivilege 4912 svchost.exe
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\shareit_gobang\js\app.a6f290e6.js1⤵PID:1836
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵PID:2716
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4912