Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

JJmatch-v20101124.exe

windows7-x64

7

JJmatch-v20101124.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

GCSkin/Def...t1.ps1

windows7-x64

3

GCSkin/Def...t1.ps1

windows10-2004-x64

3

LordTheme/...n0.ps1

windows7-x64

3

LordTheme/...n0.ps1

windows10-2004-x64

3

TKChatCtrl.dll

windows7-x64

1

TKChatCtrl.dll

windows10-2004-x64

1

TKEmotionPlayer.dll

windows7-x64

1

TKEmotionPlayer.dll

windows10-2004-x64

1

TKGC.exe

windows7-x64

1

TKGC.exe

windows10-2004-x64

1

TKGameChatCtrl.dll

windows7-x64

3

TKGameChatCtrl.dll

windows10-2004-x64

3

TKLobby.exe

windows7-x64

1

TKLobby.exe

windows10-2004-x64

1

TKLobby.exe

windows7-x64

1

TKLobby.exe

windows10-2004-x64

1

TKLord.exe

windows7-x64

1

TKLord.exe

windows10-2004-x64

1

TKLordDll.dll

windows7-x64

5

TKLordDll.dll

windows10-2004-x64

5

TKMahjongDll.dll

windows7-x64

4

TKMahjongDll.dll

windows10-2004-x64

4

TKMatchInfo.dll

windows7-x64

1

TKMatchInfo.dll

windows10-2004-x64

1

TKProducts...ion.js

windows7-x64

3

TKProducts...ion.js

windows10-2004-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/06/2024, 15:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    TKLobby.exe

  • Size

    640KB

  • MD5

    53d630dfcde4b9f100a46cc8aa65eee2

  • SHA1

    9e1f467686e0ee2a4269241bc595c7e1c56e77aa

  • SHA256

    7a741735708ab53ea422ab81a07b2195cadbcb5800a634b55d188955544bc05d

  • SHA512

    9226f49d7b16af112e71b75e221218c174e9b78d864532370288bb887a2c406a08e0dadaf7f5072e3124e877d776a57a728658de05d32be3750ccc00e5eedf8c

  • SSDEEP

    6144:B9rDvJ6PamdBJ8hhjtctO5MCNOaaKro6DKM+E3LAqnwo5LqTsssQQQQQQe9JB:LQ8jtc85WnXFE3LAqwd

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TKLobby.exe
    "C:\Users\Admin\AppData\Local\Temp\TKLobby.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:116

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/116-0-0x0000000005570000-0x00000000055C5000-memory.dmp

    Filesize

    340KB

    Download