Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

TNod-1.4.1...up.exe

windows7-x64

7

TNod-1.4.1...up.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

TNODUP.exe

windows7-x64

6

TNODUP.exe

windows10-2004-x64

6

tnodicons.exe

windows7-x64

1

tnodicons.exe

windows10-2004-x64

3

uninst-tnod.exe

windows7-x64

7

uninst-tnod.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17d4e3a7acdaaf558a2789e6dcaa1e4c_JaffaCakes118

  • Size

    745KB

  • Sample

    240627-2tw2yawdqa

  • MD5

    17d4e3a7acdaaf558a2789e6dcaa1e4c

  • SHA1

    e8f240b3e75aedc899edf497f8851f488357580b

  • SHA256

    0497f0e3da739e7404c85def9e3c475492c458593f2f5e6bc93077aa6acd52d2

  • SHA512

    3b855ede2bdfadbe231f88dae68f0455e530b0c58b488b0a59920caebe295577282b3e147f1c665984861a93efa3c80a12a538b8426c12a03d4bc61b4c8b20f6

  • SSDEEP

    12288:JtfEkrmQCTFmoglU3ZbsFISDlNMJv/21Km1zt43OahQDpC1UDaIxiDyscVFWi8by:/MkGTsoggZb4VHMJ13cNDrKi8bje

Score
7/10

Malware Config

Targets

    • Target

      TNod-1.4.1.0-final-setup.exe

    • Size

      768KB

    • MD5

      e90ab11e9276357ea3de79d51615fcd1

    • SHA1

      b9e213803cecad0d378074249fc3c1e394004c99

    • SHA256

      0bc7668459e57af7886d60031dd85ad60b2bc522ae0389d7e64472bfbf235846

    • SHA512

      bcadeebdb73acad4b3a2045f5b65344290d47fa979fff0a2106f3b25806b94267fd14ef4f66ca9564650b364130b418c8cbc003bece81c367f595df2ff981d65

    • SSDEEP

      12288:g6KfeRB8YJO4ALJ/huQ7XliHCJYAKe6wrldhCpD22w+9S352HEyq9LRSAwMpI:n8ek5XXlOgYDW3hCp6R+KewqP

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/LangDLL.dll

    • Size

      5KB

    • MD5

      a401e590877ef6c928d2a97c66157094

    • SHA1

      75e24799cf67e789fadcc8b7fddefc72fdc4cd61

    • SHA256

      2a7f33ef64d666a42827c4dc377806ad97bc233819197adf9696aed5be5efac0

    • SHA512

      6093415cd090e69cdcb52b5d381d0a8b3e9e5479dac96be641e0071f1add26403b27a453febd8ccfd16393dc1caa03404a369c768a580781aba3068415ee993f

    • SSDEEP

      48:iV6sAvmNC6iMPUptxEZK65x/AmvycNSmwVsOYJyvrpXptp/JvR0Joof5d2:2V11GED5ZTvycNSmwVsTJuftpZR0Ld2

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/StartMenu.dll

    • Size

      7KB

    • MD5

      4e96f412a8cc653053d5d918df6b0836

    • SHA1

      a3c7d59043feecb1603874b27c23d4166b341f2d

    • SHA256

      e4a54bfc327986a89165bdef361069810aaa985c3abecd442c786725fabaf977

    • SHA512

      2fec61b4ad31250bdbdbbfd551d831801790b96902c67200661e8f4f2753378bbf6c0c88b12e1be9173a29597827c1c4809511b6d52666dc3324bd7031c8229d

    • SSDEEP

      96:IiqA7bDe2xHkR1C41EhvSE+6nNtMn0iGd8CqRLqtJ1trRhElfL:IiqA7/ZH0uQMtcfCqo/tdgf

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/UserInfo.dll

    • Size

      4KB

    • MD5

      1e8e11f465afdabe97f529705786b368

    • SHA1

      ea42bed65df6618c5f5648567d81f3935e70a2a0

    • SHA256

      7d099352c82612ab27ddfd7310c1aa049b58128fb04ea6ea55816a40a6f6487b

    • SHA512

      16566a8c1738e26962139aae893629098dc759e4ac87df3e8eb9819df4e0e422421836bb1e4240377e00fb2f4408ce40f40eee413d0f6dd2f3a4e27a52d49a0b

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      ab73c0c2a23f913eabdc4cb24b75cbad

    • SHA1

      6569d2863d54c88dcf57c843fc310f6d9571a41e

    • SHA256

      3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457

    • SHA512

      99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8

    • SSDEEP

      96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420

    Score
    3/10
    behavioral11behavioral12

    • Target

      TNODUP.exe

    • Size

      1.8MB

    • MD5

      0ea8529b45b2d02bfe8ddef94abc283e

    • SHA1

      93797738f6eb18b8da79957077292bde6a51e1a5

    • SHA256

      a1e18bc272e7d5618496a6d32ad6b1fbea550ec76cf112b5ac1499c0366f6fdd

    • SHA512

      37327022f69b852f2d029daa29562596a95ab19da53f8f3cd19b12d55c824a1342cc7ba61bd3b965ee3c48479a52f6cb9da3e5d023f73fbe73857a22fd03e023

    • SSDEEP

      24576:vW5ZM2i4Xa1pHf4hTfOfJ1Vz04RAJISi4bgvyr9JVTr8k:vvZm4RuVbgE/TQk

    Score
    6/10

    • Checks for any installed AV software in registry

    behavioral13behavioral14

    • Target

      tnodicons.icl

    • Size

      95KB

    • MD5

      49d13d0454ea8fbc278a026686011803

    • SHA1

      4f0d82c75aa2f1e1cc5701bacd26ea6d98263ee3

    • SHA256

      f2643ce646f2c5a69adfa271c2c88033fcbbe2de037ad01ddb5bca076a380084

    • SHA512

      0f8c9b47054658c8b020c429fb4cc2de5e4109223fd84ecc4f32719f2c516ff4e1ae25d05a3d3b0a570c4efa921d5cbb3065a5b53ed57b9f1a04cb31ebcadbe0

    • SSDEEP

      1536:cTpbQlXn0nNZyOV6Tk1aF8LsZYyiX0mOwqwgwe:cbQ1n0NZPV641blVe

    Score
    3/10
    behavioral15behavioral16

    • Target

      uninst-tnod.exe

    • Size

      68KB

    • MD5

      20a957adb3a77da83c0b29294005a068

    • SHA1

      75dbc344061ef8bc2760a0f5fca872e4d372173b

    • SHA256

      a7d75ebccdfa0378540e9bf22d9749054126978da52ed67f5678e29be5fff843

    • SHA512

      1d2f1edb835e90c75a47daf9c4dc0eea3903d90edd4aabe1923d09f3c91f2aa5b0b37c68b138b1113dc60063f384f9075077bbe50851bd68c1981baf168e1a67

    • SSDEEP

      1536:VQpQ5EP0ijnRTXJKqpxn6acrTPQxaAqCA7clG0H1pN:VQIURTXJ7N67PQpHA7clvB

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral17behavioral18

    • Target

      $PLUGINSDIR/LangDLL.dll

    • Size

      5KB

    • MD5

      a401e590877ef6c928d2a97c66157094

    • SHA1

      75e24799cf67e789fadcc8b7fddefc72fdc4cd61

    • SHA256

      2a7f33ef64d666a42827c4dc377806ad97bc233819197adf9696aed5be5efac0

    • SHA512

      6093415cd090e69cdcb52b5d381d0a8b3e9e5479dac96be641e0071f1add26403b27a453febd8ccfd16393dc1caa03404a369c768a580781aba3068415ee993f

    • SSDEEP

      48:iV6sAvmNC6iMPUptxEZK65x/AmvycNSmwVsOYJyvrpXptp/JvR0Joof5d2:2V11GED5ZTvycNSmwVsTJuftpZR0Ld2

    Score
    3/10
    behavioral19behavioral20

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral21behavioral22

    • Target

      $PLUGINSDIR/UserInfo.dll

    • Size

      4KB

    • MD5

      1e8e11f465afdabe97f529705786b368

    • SHA1

      ea42bed65df6618c5f5648567d81f3935e70a2a0

    • SHA256

      7d099352c82612ab27ddfd7310c1aa049b58128fb04ea6ea55816a40a6f6487b

    • SHA512

      16566a8c1738e26962139aae893629098dc759e4ac87df3e8eb9819df4e0e422421836bb1e4240377e00fb2f4408ce40f40eee413d0f6dd2f3a4e27a52d49a0b

    Score
    3/10
    behavioral23behavioral24

MITRE ATT&CK Enterprise v15

Tasks