Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

6

RESCN.NET�...m1.asp

windows7-x64

3

RESCN.NET�...m1.asp

windows10-2004-x64

3

RESCN.NET�...spx.js

windows7-x64

3

RESCN.NET�...spx.js

windows10-2004-x64

3

RESCN.NET�...lt.asp

windows7-x64

3

RESCN.NET�...lt.asp

windows10-2004-x64

3

RESCN.NET�...al.asp

windows7-x64

3

RESCN.NET�...al.asp

windows10-2004-x64

3

RESCN.NET�...ax.vbs

windows7-x64

1

RESCN.NET�...ax.vbs

windows10-2004-x64

1

RESCN.NET�...px.vbs

windows7-x64

1

RESCN.NET�...px.vbs

windows10-2004-x64

1

RESCN.NET�...ite.js

windows7-x64

3

RESCN.NET�...ite.js

windows10-2004-x64

3

RESCN.NET�...in.asp

windows7-x64

3

RESCN.NET�...in.asp

windows10-2004-x64

3

RESCN.NET�...er.asp

windows7-x64

3

RESCN.NET�...er.asp

windows10-2004-x64

3

RESCN.NET�...el.asp

windows7-x64

3

RESCN.NET�...el.asp

windows10-2004-x64

3

RESCN.NET�...tor.js

windows7-x64

3

RESCN.NET�...tor.js

windows10-2004-x64

3

RESCN.NET�...tor.js

windows7-x64

3

RESCN.NET�...tor.js

windows10-2004-x64

3

RESCN.NET�...tor.js

windows7-x64

3

RESCN.NET�...tor.js

windows10-2004-x64

3

RESCN.NET�...ls.dll

windows7-x64

1

RESCN.NET�...ls.dll

windows10-2004-x64

1

RESCN.NET�...pup.js

windows7-x64

3

RESCN.NET�...pup.js

windows10-2004-x64

3

RESCN.NET�...st.vbs

windows7-x64

1

RESCN.NET�...st.vbs

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4951d1562ce6f37ff80b48d4c7246606_JaffaCakes118

  • Size

    6.1MB

  • Sample

    240715-l4x4zsteka

  • MD5

    4951d1562ce6f37ff80b48d4c7246606

  • SHA1

    d5b257a50ffbdac168cfe91a548dd0011eeacda3

  • SHA256

    27b246a1030828879a9fd69d0f14e5d4dcb92cf63d3b0311e89b8f7c52b385f8

  • SHA512

    88f733497787c79cac15d1f91562d20f92e33f084e332d0db061d51a6edf28c3ac668e45532fd89373d6c53cb08bd92918c87d62f22560d555bc2ca13786d2c3

  • SSDEEP

    196608:N7B38q8UOKo7hstHh0bxzbO8t5Cmt6ruQthGNoLBB:NN38/Th2B0NzbO8qmYTh1BB

Score
6/10
evasionexecutionpdf

Malware Config

Targets

    • Target

      RESCN.NET全站系统/DataForm1.aspx

    • Size

      2KB

    • MD5

      488b7af98f3c82897c9a488971da7d2f

    • SHA1

      02133da4b7263418ec3b5a696f8efdda92f942f6

    • SHA256

      e60def8cacb425770ce6a2c071d320898f1039fbb2215b25abb775d1f8c629ef

    • SHA512

      00cd375317f19466c9cbaa9994cf2e78f0fe7f136cf5d122eec265eb89dbfe772c8e25e62b93300113df8d193765da442c5574fbcdf8eff164a9f8eadfe5cdfb

    Score
    3/10
    behavioral1behavioral2

    • Target

      RESCN.NET全站系统/DataForm1.aspx.cs

    • Size

      9KB

    • MD5

      054df0abb6652492cf4016ac453a8e8f

    • SHA1

      817f03dd83700e875da6faeab5a7fec2987bdde7

    • SHA256

      e7e23181820dec754cf3a3eaa4876e6b233285e6662f4551779d34128ee09b84

    • SHA512

      76a0aa529f97eefa5c07ee3c435b924a385739785c1c77b1b754d39778e9f28e9afdfaaebe3bb907e37270efabc137bb3d32fdfbe9e618937df89021adb3a10c

    • SSDEEP

      192:YpGmYOHv6G3wJ/RgNZZ5YTuIUivU24ojr9oeqmudaG:YpG2NiqTSUihHoea

    Score
    3/10
    execution
    behavioral3behavioral4

    • Target

      RESCN.NET全站系统/Default.aspx

    • Size

      132B

    • MD5

      365368f315a1e15e88c980db36a97bcf

    • SHA1

      cc90bf2534d4a5cd9ee3d8cb6b65f825ca209a4b

    • SHA256

      ef9e22c6bef562d69f4f34678f3d8ca24cf76b894184e7fe02e04cb440e7e3d4

    • SHA512

      64e75be81aab64ef19e5f04eab3b86f84c1dc642c569ada493578ff832dc7e8707f4af6ae3447570690d306825c361f12e80668eaf73ff6cb6997620083360c2

    Score
    3/10
    behavioral5behavioral6

    • Target

      RESCN.NET全站系统/Global.asax

    • Size

      70B

    • MD5

      ab60069afc7a06d485c7a4e45359df5b

    • SHA1

      0a1798168ed612315106ae424cb772618b8e9abf

    • SHA256

      b64747080dca4d55e3b2e6d9f98bb1e5df6a6bdb0950bc1e038ad7bc51dbeb4e

    • SHA512

      8fe385deb9849ffaa5ca808ac725adffa50306cf8c54e334ff52759f23b2ab44f208281b5a49d54fced4032fd7230f3a22abb41e8f5eb5243c55100ef253366e

    Score
    3/10
    behavioral7behavioral8

    • Target

      RESCN.NET全站系统/Global.asax.vb

    • Size

      4KB

    • MD5

      45b6c40f6937c700aa666281f062aabe

    • SHA1

      dfd5910cb0d0df859d8291acf3cff96793df2f73

    • SHA256

      3973cec4091e7f416081af7e56bfd11994f72a20510dfa99ba4b5ac2b18bbb55

    • SHA512

      b2545a4d2f5a76234a8021224e802bc8506aea0e1c92be25175717bafc96c3b61233557cb2e1303ca5529e6dbf393b1a1d91d6a130b67d7a5dd38f6bf2c84995

    • SSDEEP

      96:mog8LhVXd8S+vPLruUH64eOBUHL5aiwc1i:5LTd8S+vPLpPeHN/xw

    Score
    1/10
    behavioral10behavioral9

    • Target

      RESCN.NET全站系统/GuestBook.aspx.vb

    • Size

      14KB

    • MD5

      5f8540686319153ed73a645dc1e27358

    • SHA1

      3aab2808b2a89d4a20874b28f304c229c0b560cc

    • SHA256

      e5a628c444ae630ca40f0f0e936745896db19c4686325afdd5964d8644d43658

    • SHA512

      2d534bcabce403afe9a79af4cb65faca64d0dcfe35eb17f780ff16bd8f86f2587af476171c332123059e26eca6b048cce3f5705aaed6d235e1177b0f4c88fcb8

    • SSDEEP

      384:SMqINksbVMdPFM4RQmT63dGDNArzsNSGlhdBLNxaN/TfvmdNt:SMBksbVMdPFXRQ8mdGRAvsHlhP5k7nmt

    Score
    1/10
    behavioral11behavioral12

    • Target

      RESCN.NET全站系统/GuestWrite.aspx

    • Size

      122KB

    • MD5

      0a39bbccf0c20f8fb4b4a31604708869

    • SHA1

      3a9d7290572920ee2fd31d15f40b5d4d44d08fb9

    • SHA256

      003ac3fe30914ff6a75d3e0e946e3d6c336fb9b9dbe103a4ffee0832b8fe9766

    • SHA512

      d8dd5dd5c55a67d7c5d99711649111c85544f98112c25d1d42d64877b6ff1e4340cdc03a7f194383d0bfbd977c32cee56aa9fc5ff50d209fe3d46b9025bdd578

    • SSDEEP

      1536:oPR3yajFL9fYy7gUKAYnYPRmyd0rDjFL9fYy7oJUKAYnIPi7wG05Pc+rptr:oPNPsPi7NM

    Score
    3/10
    execution
    behavioral13behavioral14

    • Target

      RESCN.NET全站系统/Modules/Margin.ascx

    • Size

      4KB

    • MD5

      1ac0e9c30c28e8516bcf411a45187fb3

    • SHA1

      9e2e1165145e615f43e69a3e5daf12c4e4c23f0e

    • SHA256

      69ae450c0b99f96614b11c356f11e5192ceebb89485d5bec8d3f32bbcf05a26a

    • SHA512

      3502227328c0e0dfd16554d8942bd1cae57501abb3b05e0259d69eef1a17f24d2bc823a63a999eb8d07314188a0ac68f231bb8346ab7d34de90a5056a694fead

    • SSDEEP

      96:Rn4MCRneVwk9CatkecSAWxVbkqkZkozuz8pzA4zY4zk4z3mPmQYSzGWJ6GovKnvt:RnuneVH9CaSvSAWXYRuozuzyAcYckc3w

    Score
    3/10
    behavioral15behavioral16

    • Target

      RESCN.NET全站系统/Modules/Onliner.ascx

    • Size

      792B

    • MD5

      51fa750c22073eb66b9ca3b227cde819

    • SHA1

      6d333ee5dff6c740a8b012aa7fbf0e68b9844412

    • SHA256

      f044dd6fcf8e58faf161f3f9c569906aba47fc98c6e751c99003cb8fcb7a9497

    • SHA512

      e16b273c19249ac2f0cbdfd65ed5d8cc8281ef7a3f9094780dd83000ded4eca12fe5f33bc9fcf423ec172d33b61cdca52dda3e80e71ca5fb4166f868c7410403

    Score
    3/10
    behavioral17behavioral18

    • Target

      RESCN.NET全站系统/Modules/UserPanel.ascx

    • Size

      490B

    • MD5

      3259c7a2a973a4ae496374d72228abdd

    • SHA1

      44f47021294e324d697cd9e874d2b1ea67aa6db8

    • SHA256

      382372160a3e208c00b3784990997eb44f3f1e947b413d8f68956144767316ee

    • SHA512

      294b04ba6de2715612f42080dc06d1865222338190e75bff0c4990c61e5bcedabd306b4421bbba65b17c3d729bb93c8439af4f903311efc37362a29c3dd8e297

    Score
    3/10
    behavioral19behavioral20

    • Target

      RESCN.NET全站系统/RescnDlls/bbs/CBBSLocator.cs

    • Size

      9KB

    • MD5

      8d64415ea67762214345984ad3fa9ee1

    • SHA1

      1aaad883ad87c98dfaa0fb86a7e0ddf69c102f96

    • SHA256

      72a0ee77a00b3f17f93605969188285f4049de38f1acdfbb0af272d9480b27f0

    • SHA512

      a2e5f2d8434d4313bb82f0ca3de24d79ab61358f6b9e63f24199ae434696d0a45615eb31ba176f34793679158ba6153f7dc8c0d6edf6501732dc7ecd8547b127

    • SSDEEP

      192:zrsf8rz9LHIGMfzrErMcmbZxa/Pra+/nhbfv:zfrRm/a/Pra6nhjv

    Score
    3/10
    execution
    behavioral21behavioral22

    • Target

      RESCN.NET全站系统/RescnDlls/bbs/CMarginLocator.cs

    • Size

      5KB

    • MD5

      c0d5acc0c0073598ea0de7c99b59119f

    • SHA1

      0221916b9140da92278b163b895dfd614881ec45

    • SHA256

      7c006dfac6d39784f9528698c318093fe92d05d7110cb14c53430f362b17068f

    • SHA512

      64e78c3ad3fa53fe1310e6adfb9ff66066daf937db3e01f946ddc40afb9d4c73b781a60b6b4c8036328f6bdaf2108f10eff42d30d00815514178951d4116bb5a

    • SSDEEP

      96:CjXkM78cAW+l2AwNxYiWiWkmWiWk7Bxp4/v:ymWi8+niWaiWcxq/v

    Score
    3/10
    execution
    behavioral23behavioral24

    • Target

      RESCN.NET全站系统/RescnDlls/bbs/CTopicLocator.cs

    • Size

      8KB

    • MD5

      b673434d77eb3abbfe98050e4261b591

    • SHA1

      899159cb0ea3fbd56acac6af12e730b005654259

    • SHA256

      7008b6ab3db98d6a1323b1aa1b923460a40eeef471522290d2a12aa351a28c29

    • SHA512

      09658e12a0f0112f362e921126312f1817f75f1940c2f94ab21267bce090a4e2909ad317ad1c8dfec22a6e020ef85f768802eb6463fcb3e34786c6078f0715b9

    • SSDEEP

      192:tpqcsAFSwIE84Z3JfGw8pfQ7xTez7rAez/yezgl0Spv:+6FSn41JuBVQ7xTe3rAeryeefv

    Score
    3/10
    execution
    behavioral25behavioral26

    • Target

      RESCN.NET全站系统/RescnDlls/bin/Debug/RescnDlls.dll

    • Size

      156KB

    • MD5

      111a17bec3cbfd50992a2fe69a99189a

    • SHA1

      6de03582e6239d9c140ce63cb9eb4e9a8db16052

    • SHA256

      190d34dfda3766c1b0aef96909caaa333d2731f185e6c167c7813383f211d970

    • SHA512

      4ee06798b33a93e4d779c4db4deb019642586b5db12a2eefea9cf15b74f1d6e0df696dec6c92ada4414ff7d3f3fc70c2f239d4d9b9be1befdbc905e3ca5e1524

    • SSDEEP

      3072:B5jXiLGwwXCyjH6OZuxmt4k68hCjngCRCFng9V/9+oie9PblyVG5/f/u7:B5riLGwwPaOZui4k6j9+oie9Pbld5/fW

    Score
    1/10
    behavioral27behavioral28

    • Target

      RESCN.NET全站系统/RescnDlls/controls/LabelPopup.cs

    • Size

      3KB

    • MD5

      deea0fb1af5087be3e96b8f9cc2e8504

    • SHA1

      9af75e9b0eaaf6123d7140b58126ae83bdc2dcdf

    • SHA256

      aea9a2d8a751d2cab848c3eca3dbed8df79aa14bd7d5ac5a5db09fc13a30fdf3

    • SHA512

      4b7e3d031d099020dc63cb4345e23879c572a33a46b5fb1babb44a1ff2fcb869d256026e59a2aa20e626f333f6a3576dd8d31133458e38de7d00adfcc0431b0d

    Score
    3/10
    execution
    behavioral29behavioral30

    • Target

      RESCN.NET全站系统/RescnDlls/controls/OnlineUserList.cs

    • Size

      8KB

    • MD5

      43d4947d44325ee2ccc0d53400160cfb

    • SHA1

      f4f70dc729bf6a8f523bbf728994247cf8833da2

    • SHA256

      9810f650cea10c34f44a5f838524a6c3b638a6f847407c04eaf20b5c19b2c291

    • SHA512

      77403ddb7a328f56b035dc0bbdc809fa18e56a16b809ce3f148461f369b01dc4244f1c9a0b6a21357f2c67bd34550bc8c9cf010d3b7720f07959e0ca3deaeb12

    • SSDEEP

      192:IfqGy3VVNHE8FNiHKmk0BfUsaUcwR9lioiC90FjjA2pPpiP4piuI4HhUj+63y1k5:IfqGy3PNHEWNiqmkD2/RqzFj5hiPEiuE

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

pdfevasion
Score
6/10

behavioral1

Score
3/10

behavioral2

Score
3/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

Score
3/10

behavioral6

Score
3/10

behavioral7

Score
3/10

behavioral8

Score
3/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

Score
3/10

behavioral16

Score
3/10

behavioral17

Score
3/10

behavioral18

Score
3/10

behavioral19

Score
3/10

behavioral20

Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

Score
1/10

behavioral32

Score
1/10