Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3TVK.exe
windows7-x64
7TVK.exe
windows10-2004-x64
7//...ll.exe
windows7-x64
//...ll.exe
windows10-2004-x64
/Buffering.htm
windows7-x64
/Buffering.htm
windows10-2004-x64
/LoginTV.htm
windows7-x64
/LoginTV.htm
windows10-2004-x64
/WhatsNew.htm
windows7-x64
/WhatsNew.htm
windows10-2004-x64
/config.dll
windows7-x64
/config.dll
windows10-2004-x64
/mobilefee.htm
windows7-x64
/mobilefee.htm
windows10-2004-x64
/setup.exe
windows7-x64
/setup.exe
windows10-2004-x64
$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$TEMP/modules/$R0.dll
windows7-x64
6$TEMP/modules/$R0.dll
windows10-2004-x64
6$TEMP/modu...dr.dll
windows7-x64
6$TEMP/modu...dr.dll
windows10-2004-x64
6$TEMP/modu...xr.dll
windows7-x64
7$TEMP/modu...xr.dll
windows10-2004-x64
7$TEMP/modu...xr.exe
windows7-x64
1$TEMP/modu...xr.exe
windows10-2004-x64
1$TEMP/modu...ll.exe
windows7-x64
1$TEMP/modu...ll.exe
windows10-2004-x64
1$TEMP/modu...gn.dll
windows7-x64
1$TEMP/modu...gn.dll
windows10-2004-x64
1Analysis
-
max time kernel
93s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
09/07/2024, 13:59
Static task
static1
Behavioral task
behavioral1
Sample
TVK.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
TVK.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
//uninstall.exe
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
//uninstall.exe
Resource
win10v2004-20240708-en
Behavioral task
behavioral5
Sample
/Buffering.htm
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
/Buffering.htm
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
/LoginTV.htm
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
/LoginTV.htm
Resource
win10v2004-20240704-en
Behavioral task
behavioral9
Sample
/WhatsNew.htm
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
/WhatsNew.htm
Resource
win10v2004-20240708-en
Behavioral task
behavioral11
Sample
/config.dll
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
/config.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral13
Sample
/mobilefee.htm
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
/mobilefee.htm
Resource
win10v2004-20240704-en
Behavioral task
behavioral15
Sample
/setup.exe
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
/setup.exe
Resource
win10v2004-20240708-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral21
Sample
$TEMP/modules/$R0.dll
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
$TEMP/modules/$R0.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral23
Sample
$TEMP/modules/addr.dll
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
$TEMP/modules/addr.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral25
Sample
$TEMP/modules/auxr.dll
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
$TEMP/modules/auxr.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral27
Sample
$TEMP/modules/auxr.exe
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
$TEMP/modules/auxr.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral29
Sample
$TEMP/modules/shell.exe
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
$TEMP/modules/shell.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral31
Sample
$TEMP/modules/sign.dll
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
$TEMP/modules/sign.dll
Resource
win10v2004-20240704-en
General
-
Target
TVK.exe
-
Size
1.8MB
-
MD5
423c464233957c5051d0ff3c99374eb9
-
SHA1
b6f57eddda400ad497944ee9e83a1f5668fdf17c
-
SHA256
49ff2e5130f5eface959ad9926fd7a6095c6e2b3341b246b772a94362493cc33
-
SHA512
0e7b9bfbf08f5ccfae2a4e0eb5b781c4942401112734d86ba1363321be8ce45f5fdfad373122b35edb5b27af6b96f54b2084cb18e30162d5be4543a607aafc48
-
SSDEEP
49152:EOEnpV1qK/jsTargC/1TuusZWhKWGL6ImfT:bgcK7rBtTuuVZGL6TT
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 1568 TVK.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
MD5695751df50c11f303b060d63eababe1d
SHA1ffa5fa91750c3e63589fecae8aa90c232611c94d
SHA2564f871b4c8815758f7718ad68d688c6dc05cae205ddf3bcb00147a99746414435
SHA512c9877e0d08c65b23717f3acf3be92ead79c6afde594bd4358694e128fb7149f4a1f33380fae0fb65411e5c68a9d91d2a353b4ef3da5169d3452441eb65880ce0
-
Filesize
548B
MD50678560f57a3ea1a706fa49b949fc2c9
SHA119ab91fc1d7eb6a5bafd60707eabd7b00f7aea8d
SHA256e4559ac6dd4c76a758a65b682a679e5b58c8f3d526f7210553466f18109260fd
SHA512ce627e9a854ab121d379f789521bc3d3b3d0d5b4a24380066f35cbbd756cd38ce1aa49812a5e29064b6ead769664d9c1e7f3676934c540cce49b093daebc104c