Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3JJmatch-v20101124.exe
windows7-x64
7JJmatch-v20101124.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows7-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3GCSkin/Def...t1.ps1
windows7-x64
3GCSkin/Def...t1.ps1
windows10-2004-x64
3LordTheme/...n0.ps1
windows7-x64
3LordTheme/...n0.ps1
windows10-2004-x64
3TKChatCtrl.dll
windows7-x64
1TKChatCtrl.dll
windows10-2004-x64
1TKEmotionPlayer.dll
windows7-x64
1TKEmotionPlayer.dll
windows10-2004-x64
1TKGC.exe
windows7-x64
1TKGC.exe
windows10-2004-x64
1TKGameChatCtrl.dll
windows7-x64
3TKGameChatCtrl.dll
windows10-2004-x64
3TKLobby.exe
windows7-x64
1TKLobby.exe
windows10-2004-x64
1TKLobby.exe
windows7-x64
1TKLobby.exe
windows10-2004-x64
1TKLord.exe
windows7-x64
1TKLord.exe
windows10-2004-x64
1TKLordDll.dll
windows7-x64
5TKLordDll.dll
windows10-2004-x64
5TKMahjongDll.dll
windows7-x64
4TKMahjongDll.dll
windows10-2004-x64
4TKMatchInfo.dll
windows7-x64
1TKMatchInfo.dll
windows10-2004-x64
1TKProducts...ion.js
windows7-x64
3TKProducts...ion.js
windows10-2004-x64
3General
-
Target
1685ff3ed1e004631cd55e4ae0aeaba7_JaffaCakes118
-
Size
13.7MB
-
Sample
240627-swgklaxflf
-
MD5
1685ff3ed1e004631cd55e4ae0aeaba7
-
SHA1
db634212374555ca01bea5c7a03f27ac2c520fc0
-
SHA256
39e1780e7003dfbeb31a0b0c1d1c9c72c7eeaafa30cd1408757b9ceb56916e93
-
SHA512
5511071cb6ae4d5517a66c9b2dd9bd772f1b93f29cfb8629d9a8d71965f66bd7dae183fc376e1921bcca43fe9f3fdbf5ee45ee7e52e63916df41917b55060394
-
SSDEEP
393216:PF3K66gO+mmr2cGXhe1tqeruXYoChIlGj/4dS:PFa66g6q3l1ke+YoCIl6/4E
Static task
static1
Behavioral task
behavioral1
Sample
JJmatch-v20101124.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
JJmatch-v20101124.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
GCSkin/Default/BtnPot1.ps1
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
GCSkin/Default/BtnPot1.ps1
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
LordTheme/Default/ChangeYellowBoyBtn0.ps1
Resource
win7-20240611-en
Behavioral task
behavioral10
Sample
LordTheme/Default/ChangeYellowBoyBtn0.ps1
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
TKChatCtrl.dll
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
TKChatCtrl.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
TKEmotionPlayer.dll
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
TKEmotionPlayer.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
TKGC.exe
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
TKGC.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral17
Sample
TKGameChatCtrl.dll
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
TKGameChatCtrl.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral19
Sample
TKLobby.exe
Resource
win7-20240611-en
Behavioral task
behavioral20
Sample
TKLobby.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
TKLobby.exe
Resource
win7-20240220-en
Behavioral task
behavioral22
Sample
TKLobby.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
TKLord.exe
Resource
win7-20240611-en
Behavioral task
behavioral24
Sample
TKLord.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
TKLordDll.dll
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
TKLordDll.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
TKMahjongDll.dll
Resource
win7-20240611-en
Behavioral task
behavioral28
Sample
TKMahjongDll.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral29
Sample
TKMatchInfo.dll
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
TKMatchInfo.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
TKProducts/10/SpryAssets/SpryAccordion.js
Resource
win7-20240508-en
Behavioral task
behavioral32
Sample
TKProducts/10/SpryAssets/SpryAccordion.js
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
JJmatch-v20101124.exe
-
Size
13.7MB
-
MD5
da4a7879f242f9f85b2633b176bc4bc5
-
SHA1
7acc32a1d16bee9e3e9a56ea8b421a3e3709132c
-
SHA256
a848401f87f0a982861e599375fd856f7d0332b58ce66970491b4fd3c5168338
-
SHA512
fb338006e030ffa4d027e945c403081466020772f3764260465856e2f1e9e3bc6c541b835932edf801a77deed892558b6d8c071188c6a183650a42d56286e286
-
SSDEEP
393216:rTkVJrR6kJbp8EOTPvZkBU+vJKDssvYDn6hEzKzYis:rTCxrFuTPhsHqs4YDncAT
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
14KB
-
MD5
0dc0cc7a6d9db685bf05a7e5f3ea4781
-
SHA1
5d8b6268eeec9d8d904bc9d988a4b588b392213f
-
SHA256
8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c
-
SHA512
814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0
-
SSDEEP
192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo
Score3/10 -
-
-
Target
$PLUGINSDIR/StartMenu.dll
-
Size
7KB
-
MD5
4e96f412a8cc653053d5d918df6b0836
-
SHA1
a3c7d59043feecb1603874b27c23d4166b341f2d
-
SHA256
e4a54bfc327986a89165bdef361069810aaa985c3abecd442c786725fabaf977
-
SHA512
2fec61b4ad31250bdbdbbfd551d831801790b96902c67200661e8f4f2753378bbf6c0c88b12e1be9173a29597827c1c4809511b6d52666dc3324bd7031c8229d
-
SSDEEP
96:IiqA7bDe2xHkR1C41EhvSE+6nNtMn0iGd8CqRLqtJ1trRhElfL:IiqA7/ZH0uQMtcfCqo/tdgf
Score3/10 -
-
-
Target
GCSkin/Default/BtnPot1.bmp
-
Size
152KB
-
MD5
312e09450face7ec524a8c1d312fc609
-
SHA1
d0e47dd97bf1bdac1be340c9b1c32b4d5231b479
-
SHA256
1dc055c9e558682672a629ab20f5a5258aa06d1911981248efe1c1753c5dcb46
-
SHA512
f971ada4c9ca48b02d285d7be67e3ef0be669522be2aaaacbd42c2e0ec19e7fe64095ada9a5616a254fbb0d84b58061b7fae42b578a7bf3b34c89155b3e07e7a
-
SSDEEP
1536:lM5Qq6HCY7fsNzWfJQJf6joK8pK2r6orYqxeaitHLr/To1T6fGqDEb6DbG:KZevN8pj6LPFffDzm
Score3/10 -
-
-
Target
LordTheme/Default/ChangeYellowBoyBtn0.bmp
-
Size
152KB
-
MD5
312e09450face7ec524a8c1d312fc609
-
SHA1
d0e47dd97bf1bdac1be340c9b1c32b4d5231b479
-
SHA256
1dc055c9e558682672a629ab20f5a5258aa06d1911981248efe1c1753c5dcb46
-
SHA512
f971ada4c9ca48b02d285d7be67e3ef0be669522be2aaaacbd42c2e0ec19e7fe64095ada9a5616a254fbb0d84b58061b7fae42b578a7bf3b34c89155b3e07e7a
-
SSDEEP
1536:lM5Qq6HCY7fsNzWfJQJf6joK8pK2r6orYqxeaitHLr/To1T6fGqDEb6DbG:KZevN8pj6LPFffDzm
Score3/10 -
-
-
Target
TKChatCtrl.dll
-
Size
104KB
-
MD5
704307aeddaa9334cbaff5bdf8bb6315
-
SHA1
ab3d945511a4d54f5a1190eb3b7471ced382ef0d
-
SHA256
687a5631b565d7807eebc30d06072a4dde0ad486ca25ee2593433b21597f93ee
-
SHA512
d94d9d39099e943f9662d93a83bdbcee45d72a03e5054b30b369dca3154553be69123d28b8ee54f803f0953af18a6af9e2611f060bd269f5fdd916b7d2db71bb
-
SSDEEP
1536:bakDKnpqdOEso0g/WyaAmFOvIvvdNNBx54I+FHwUqUoIoUjG84gwVdEFmU1:/DrdOEsbqavFR9NNn5/4YnEF
Score1/10 -
-
-
Target
TKEmotionPlayer.dll
-
Size
88KB
-
MD5
9790413b780b0cc28a8d041332c22ed2
-
SHA1
e8f8d35078f276f126d1427973290c0542bc4b1d
-
SHA256
9f57b712be7a1b9c00dffe3c1b8cb02d136c8fec09946331b2b29214a95c64e7
-
SHA512
4c2f7a4ea2dfb014f86b46080233c4740645d6ca64a771096e997bf90510619c67fe37d980f7b926310ccbb0ed98d44cc1ccc0ddcd1a4166d5620a4f3c494d85
-
SSDEEP
1536:nmXclcc4FZB1byQgT1FnmZ1o6QF9n3x1NBc5wcu2:mXscxZB1bZgTjnm/onFNx1NW5x
Score1/10 -
-
-
Target
TKGC.exe
-
Size
500KB
-
MD5
285447f015c5b5f6ab6fb07e19ca741d
-
SHA1
824818c151030211ca4914ea941f5a93678b41b7
-
SHA256
d9012f458b26f64aea021f80cbfe1ab32a3276dc6b720adf14673569353b14f4
-
SHA512
9007552e52d72bcdfd026d7f3d1394fda84b8f4785983abf7fcae4cb27a483dda953437bec45733e5490d058ea4074843f4f4153ec8aa618b0c0e61170da0613
-
SSDEEP
12288:kyPwRGjqbVB0xMsTriHq+t+SSKiYVtigLsyOqCGd2N1zPXfnLDnmeicSa2JZF/ah:zPwRGkVB0x3kq+EctT4yOqCGd2N1zPXd
Score1/10 -
-
-
Target
TKGameChatCtrl.dll
-
Size
104KB
-
MD5
ea18569f0db24a4f2b71acad9eb19c1e
-
SHA1
56c1e1f2060db30ccf20111ace8b0a8aefb1a256
-
SHA256
a31f6354efc4e6d96f88f5380c366bf5eb069758d48dda88f389d79d8c0b9c01
-
SHA512
e74fcb602ee2c1d39e7bfcef2ea7cc81e896b5ef2732d72a3027f40b828e7c7e90a4581cf27a4b5c4bea01b4fc50389578a81babdcac4103ad9880c5da41ef53
-
SSDEEP
1536:UN5FgfOWojL3YfTpIvBdAjbczSOIutqYMcwAovJmnzhy4:OgUjL0NIv8dOPqYRDkJazhy
Score3/10 -
-
-
Target
TKLobby.exe
-
Size
648KB
-
MD5
7cbe8b22540ecbe590d9a3f59844624b
-
SHA1
9930092956cf9eda22e16756f304dbc3b3151ac6
-
SHA256
79e74ff4efbc7ce33ff1f12ce18ce4160d6bcaed66e304f7129b72c0539ba38c
-
SHA512
7d6e74aedc24e9116e37a4618c7ee3bb556cfa0dfc619852d57feb689cb11a8192c4085375195cffb7ac29420b464732da7c5c0457fcc9d4b1f13687bf9c6b89
-
SSDEEP
6144:HLCfTBe5ZAsRViOsvzvTyCs419YIk32lmEOgqnwoPHqTsssQQQQQQe9JB:OfTiR4OsLvRGtmlm1gqwr
Score1/10 -
-
-
Target
TKLobby.exe.bak
-
Size
640KB
-
MD5
53d630dfcde4b9f100a46cc8aa65eee2
-
SHA1
9e1f467686e0ee2a4269241bc595c7e1c56e77aa
-
SHA256
7a741735708ab53ea422ab81a07b2195cadbcb5800a634b55d188955544bc05d
-
SHA512
9226f49d7b16af112e71b75e221218c174e9b78d864532370288bb887a2c406a08e0dadaf7f5072e3124e877d776a57a728658de05d32be3750ccc00e5eedf8c
-
SSDEEP
6144:B9rDvJ6PamdBJ8hhjtctO5MCNOaaKro6DKM+E3LAqnwo5LqTsssQQQQQQe9JB:LQ8jtc85WnXFE3LAqwd
Score1/10 -
-
-
Target
TKLord.exe
-
Size
128KB
-
MD5
38c8fa7c3ffa3b28dda7b3eb83d60d3b
-
SHA1
527ee22d5fa6997abf0cec31f4efc756bfecc0f3
-
SHA256
623cbe4ab3a3c1e1ed85cabf12eb0a8e3d52880e513ea92742356ecbf320f8a4
-
SHA512
9f14da3f1b4074c9d2170c607fa958db42d4d80fde3ae370c549656fa05e79c5e440e039057c4e5348fc416bb01be9370499fdcfe840c2466de86f27689c390e
-
SSDEEP
1536:CHGwpIKPQZP/l3biuTJX+iKcqbiuTJX+iKc:Cmwil3biuTJX+iKRbiuTJX+iK
Score1/10 -
-
-
Target
TKLordDll.dll
-
Size
384KB
-
MD5
c26088e4fa57437ff5d17408d685f0a0
-
SHA1
b592663af2a0c0b3f69284c8c982eb452a9eb550
-
SHA256
cd9af5714f10034fc1bee23864739e09c2a3c022749ca52d531a2b8848773e8f
-
SHA512
046e9244a32fb5c327c68e091a17fffc3f84eaa70e3b4bef1c25beddb25145be590fdabc823ea940c8dc69287b89a716a05e2acc2cf33f8f1c7f1c245f8a6d3b
-
SSDEEP
6144:oXO1VjCYefJkYhRoDgofE4tfKWSsKzCY85oN/iqJX+dZ:oXO1VNYh/4NFS5CYxqqcdZ
Score5/10-
Drops file in System32 directory
-
-
-
Target
TKMahjongDll.dll
-
Size
376KB
-
MD5
780cefe6264ed47928e41018bc3c1814
-
SHA1
897141fa2995194cc8584459377cba44a97433e1
-
SHA256
9eafb555cd905b879c6d0583c30e6c663aecd7ec7ccd45ff599cf0ded5cbff83
-
SHA512
b9db7a796325966c9383f3f87bdf8908249ef63b1d4c40c349392ce5f4b281079b676629ac49a85a082c69eeca010c9b64ddf14bdd73d3e2f5ff1e1dce622d11
-
SSDEEP
6144:nCchuiA6nLd8U/Fu4FFlYATK98FqBcGKWPriqJX+duYfu9:EiAunFu47tTBqBcGUqcdU9
Score4/10 -
-
-
Target
TKMatchInfo.dll
-
Size
248KB
-
MD5
41774b2be6352f6da2e47e0dd896b37a
-
SHA1
b000754e2a47602632f8e400654b4a7553f6124a
-
SHA256
29c629557e19264f36fbb3c364de70c12112172a8b80ebfccfecdd5fa2819713
-
SHA512
2f029b7216419ad3c7f40914714eca4df91da3f5520ffa0fbcf182aa0207daf49f2a805bf892e5a9ea28ec52ed1ba436eeaef8db7e708748cc3ce9caa5b5a400
-
SSDEEP
6144:LT+2YZpQXdcAqenApR6/IA6LpZO6h7loD+yulXYcVewQqlwnx8uHu0niVG+LZ/ju:LrNANAYRi+XQZ1aEZv
Score1/10 -
-
-
Target
TKProducts/10/SpryAssets/SpryAccordion.js
-
Size
12KB
-
MD5
1076f194fa46a79464e0dbb5096a4c91
-
SHA1
17b0407a7b778d096a967f5f7d24a74431c6b65f
-
SHA256
1dd5c409409ad611fd8ba06573a5795b82c07cf75fcb0c4aef789ccf66f9786f
-
SHA512
db8e8a107f7e7820fc9906d9afeb85635d8d07ec8f92ae696343043716b8ce934d02da19ed427796202a24693317d421f28283a4efdc559bb08f88fcd9c118bb
-
SSDEEP
192:PYG4R77BKDnOhfspQJPb0DvlH9DGGF7v+:47nf+djE
Score3/10 -