Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
72f416b7a58...18.exe
windows7-x64
72f416b7a58...18.exe
windows10-2004-x64
7$PLUGINSDI...64.dll
windows7-x64
3$PLUGINSDI...64.dll
windows10-2004-x64
3$PLUGINSDI...RL.dll
windows7-x64
3$PLUGINSDI...RL.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...sh.dll
windows7-x64
3$PLUGINSDI...sh.dll
windows10-2004-x64
3$PLUGINSDIR/inetc.dll
windows7-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
3ChnCharInfo.dll
windows7-x64
1ChnCharInfo.dll
windows10-2004-x64
1DevCompone...r2.dll
windows7-x64
1DevCompone...r2.dll
windows10-2004-x64
1Interop.MSXML2.dll
windows7-x64
1Interop.MSXML2.dll
windows10-2004-x64
1Interop.SHDocVw.dll
windows7-x64
1Interop.SHDocVw.dll
windows10-2004-x64
1IrisSkin2.dll
windows7-x64
1IrisSkin2.dll
windows10-2004-x64
1bdyxw.dll
windows7-x64
7bdyxw.dll
windows10-2004-x64
7edithtm/index.html
windows7-x64
1edithtm/index.html
windows10-2004-x64
1edithtm/kindeditor.js
windows7-x64
3edithtm/kindeditor.js
windows10-2004-x64
3edithtm/pl...h.html
windows7-x64
1edithtm/pl...h.html
windows10-2004-x64
1Analysis
-
max time kernel
129s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
09/07/2024, 06:11
Behavioral task
behavioral1
Sample
2f416b7a58deefb212e5c07fe73139dd_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f416b7a58deefb212e5c07fe73139dd_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Base64.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Base64.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/BrandingURL.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/BrandingURL.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240708-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/blowfish.dll
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/blowfish.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/inetc.dll
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral15
Sample
ChnCharInfo.dll
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
ChnCharInfo.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral17
Sample
DevComponents.DotNetBar2.dll
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
DevComponents.DotNetBar2.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral19
Sample
Interop.MSXML2.dll
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
Interop.MSXML2.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral21
Sample
Interop.SHDocVw.dll
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
Interop.SHDocVw.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral23
Sample
IrisSkin2.dll
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
IrisSkin2.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral25
Sample
bdyxw.dll
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
bdyxw.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral27
Sample
edithtm/index.html
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
edithtm/index.html
Resource
win10v2004-20240704-en
Behavioral task
behavioral29
Sample
edithtm/kindeditor.js
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
edithtm/kindeditor.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral31
Sample
edithtm/plugins/flash.html
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
edithtm/plugins/flash.html
Resource
win10v2004-20240704-en
General
-
Target
edithtm/index.html
-
Size
1KB
-
MD5
abe74dd0b84a7e1c38dde4367ce9716c
-
SHA1
b87d72984b802879f0426fdf4fa3974c97126b78
-
SHA256
9921f5bd2770a3b0ccf52a3090293ae5ae84eaa7d9882fbed1d4b2a80c8d68bd
-
SHA512
1661a53f2b046bd791d5f956ca467b099ecdc8072fe18ca323b759c8b88ac516c96a53d22a32f354b9abbd1cf1202f308bf931d5f9898362162d0ac89118a8ef
Malware Config
Signatures
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\edithtm\index.html1⤵PID:2628
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=16 --field-trial-handle=3896,i,12101950716832706950,8384629015980369538,262144 --variations-seed-version --mojo-platform-channel-handle=2128 /prefetch:11⤵PID:4560
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=15 --field-trial-handle=4532,i,12101950716832706950,8384629015980369538,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:11⤵PID:1096
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --field-trial-handle=5372,i,12101950716832706950,8384629015980369538,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:11⤵PID:3940
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=5412,i,12101950716832706950,8384629015980369538,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:81⤵PID:2252
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --field-trial-handle=5532,i,12101950716832706950,8384629015980369538,262144 --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:81⤵PID:4468
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --field-trial-handle=5368,i,12101950716832706950,8384629015980369538,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:11⤵PID:2424
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --field-trial-handle=5860,i,12101950716832706950,8384629015980369538,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:81⤵PID:3896
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=5604,i,12101950716832706950,8384629015980369538,262144 --variations-seed-version --mojo-platform-channel-handle=2144 /prefetch:81⤵PID:2624