Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
7ebb72faf04...18.exe
windows7-x64
7ebb72faf04...18.exe
windows10-2004-x64
7$PLUGINSDI...nt.dll
windows7-x64
3$PLUGINSDI...nt.dll
windows10-2004-x64
3$PLUGINSDI...RL.dll
windows7-x64
3$PLUGINSDI...RL.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...eb.dll
windows7-x64
3$PLUGINSDI...eb.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows7-x64
1$PLUGINSDI...ss.dll
windows10-2004-x64
1$PLUGINSDI...nit.js
windows7-x64
1$PLUGINSDI...nit.js
windows10-2004-x64
1$PLUGINSDI...o.html
windows7-x64
1$PLUGINSDI...o.html
windows10-2004-x64
1$PLUGINSDI...ge.dll
windows7-x64
3$PLUGINSDI...ge.dll
windows10-2004-x64
3$PLUGINSDI...n12.js
windows7-x64
1$PLUGINSDI...n12.js
windows10-2004-x64
1$PLUGINSDI...ime.js
windows7-x64
1$PLUGINSDI...ime.js
windows10-2004-x64
1$PLUGINSDI...ket.js
windows7-x64
1$PLUGINSDI...ket.js
windows10-2004-x64
1$PLUGINSDI...ftp.js
windows7-x64
1$PLUGINSDI...ftp.js
windows10-2004-x64
1$PLUGINSDI...ttp.js
windows7-x64
1$PLUGINSDI...ttp.js
windows10-2004-x64
1$PLUGINSDI.../tp.js
windows7-x64
1$PLUGINSDI.../tp.js
windows10-2004-x64
1$PLUGINSDI...re.dll
windows7-x64
1$PLUGINSDI...re.dll
windows10-2004-x64
1Analysis
-
max time kernel
129s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
10/04/2024, 18:26
Behavioral task
behavioral1
Sample
ebb72faf044287d42bc7b6e61ce16e12_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ebb72faf044287d42bc7b6e61ce16e12_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/ButtonEvent.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/ButtonEvent.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/CustomBrandingURL.dll
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/CustomBrandingURL.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/CustomNSISdl.dll
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/CustomNSISdl.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/CustomnsWeb.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/CustomnsWeb.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/FloatingProgress.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/FloatingProgress.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/GuiInit.js
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/GuiInit.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/IntegratedOffer-Magoo.html
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/IntegratedOffer-Magoo.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/LuaBridge.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/LuaBridge.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/LuaSocket/lua/ltn12.js
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/LuaSocket/lua/ltn12.js
Resource
win10v2004-20240319-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/LuaSocket/lua/mime.js
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/LuaSocket/lua/mime.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/LuaSocket/lua/socket.js
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/LuaSocket/lua/socket.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/LuaSocket/lua/socket/ftp.js
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/LuaSocket/lua/socket/ftp.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/LuaSocket/lua/socket/http.js
Resource
win7-20240215-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/LuaSocket/lua/socket/http.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/LuaSocket/lua/socket/tp.js
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/LuaSocket/lua/socket/tp.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/LuaSocket/mime/core.dll
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/LuaSocket/mime/core.dll
Resource
win10v2004-20240226-en
General
-
Target
$PLUGINSDIR/IntegratedOffer-Magoo.html
-
Size
4KB
-
MD5
af3e26b27bcf894f63ace6d232629392
-
SHA1
e34cd52b7216869c4d0af7b9faad415f1fed8ff7
-
SHA256
170112c64b3dda34c956624ca42ecd2d6adc0486301acd05c33a912175735c51
-
SHA512
26ef11b81f68ba071b74363bf85b603314b5ec8e561d9d906f16bd5e9bfc9c14ee1b137d16b318a1f4287b434b099221279aced4109f11c7dd465667f46c84f5
-
SSDEEP
48:Z4YPZEnBZJOnQFFfG9mEDe9DR9vAyB/CTE5AeApzVLVoBskL7/C023xPb:WJOnQ3ewEe39v9dyE5jSzZCBsk4
Malware Config
Signatures
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\IntegratedOffer-Magoo.html1⤵PID:3520
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=5720 --field-trial-handle=2260,i,9938964625802268469,1928462186077019554,262144 --variations-seed-version /prefetch:11⤵PID:2056
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=4588 --field-trial-handle=2260,i,9938964625802268469,1928462186077019554,262144 --variations-seed-version /prefetch:11⤵PID:4396
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5744 --field-trial-handle=2260,i,9938964625802268469,1928462186077019554,262144 --variations-seed-version /prefetch:81⤵PID:5112
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=5944 --field-trial-handle=2260,i,9938964625802268469,1928462186077019554,262144 --variations-seed-version /prefetch:11⤵PID:4580
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=3876 --field-trial-handle=2260,i,9938964625802268469,1928462186077019554,262144 --variations-seed-version /prefetch:81⤵PID:4232