Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

5

Static

static

3

afaa138aa1...18.exe

windows7-x64

3

afaa138aa1...18.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

GCSkin/Def...t1.ps1

windows7-x64

3

GCSkin/Def...t1.ps1

windows10-2004-x64

3

LordTheme/...n0.ps1

windows7-x64

3

LordTheme/...n0.ps1

windows10-2004-x64

3

TKChatCtrl.dll

windows7-x64

3

TKChatCtrl.dll

windows10-2004-x64

3

TKEmotionPlayer.dll

windows7-x64

3

TKEmotionPlayer.dll

windows10-2004-x64

3

TKGC.exe

windows7-x64

3

TKGC.exe

windows10-2004-x64

3

TKGMChatCtrl.dll

windows7-x64

3

TKGMChatCtrl.dll

windows10-2004-x64

3

TKGMChatask.exe

windows7-x64

3

TKGMChatask.exe

windows10-2004-x64

3

TKGameChatCtrl.dll

windows7-x64

3

TKGameChatCtrl.dll

windows10-2004-x64

3

TKLobby.exe

windows7-x64

3

TKLobby.exe

windows10-2004-x64

3

TKLord.exe

windows7-x64

1

TKLord.exe

windows10-2004-x64

3

TKLordDll.dll

windows7-x64

5

TKLordDll.dll

windows10-2004-x64

5

TKMatchInfo.dll

windows7-x64

3

TKMatchInfo.dll

windows10-2004-x64

3

TKReplayPlayer.exe

windows7-x64

3

TKReplayPlayer.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    afaa138aa1e5f08481643baf7d5315db_JaffaCakes118

  • Size

    3.6MB

  • Sample

    240820-r87rwasbkn

  • MD5

    afaa138aa1e5f08481643baf7d5315db

  • SHA1

    09a270c02723370035632b2d7d857e25557009de

  • SHA256

    95cf0d6fe912e401abf124ead106916528f1a0dd5eb5f7be42912d8ec1d975a7

  • SHA512

    c67bb1f1d26fb6f1f208a4d60a4dc03b9459d5861671d38dc3da04e8783e146152a9eae4607ebbdee010d630ad04016531a3041a47bcd5d67a60c2054f5080f3

  • SSDEEP

    98304:hdwDoSKd+TdnKkPyhDhR01ZGsXsFNbwmAr7KT:hRgLPyhbOZGscbXAHKT

Score
5/10
discoveryexecution

Malware Config

Targets

    • Target

      afaa138aa1e5f08481643baf7d5315db_JaffaCakes118

    • Size

      3.6MB

    • MD5

      afaa138aa1e5f08481643baf7d5315db

    • SHA1

      09a270c02723370035632b2d7d857e25557009de

    • SHA256

      95cf0d6fe912e401abf124ead106916528f1a0dd5eb5f7be42912d8ec1d975a7

    • SHA512

      c67bb1f1d26fb6f1f208a4d60a4dc03b9459d5861671d38dc3da04e8783e146152a9eae4607ebbdee010d630ad04016531a3041a47bcd5d67a60c2054f5080f3

    • SSDEEP

      98304:hdwDoSKd+TdnKkPyhDhR01ZGsXsFNbwmAr7KT:hRgLPyhbOZGscbXAHKT

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      0dc0cc7a6d9db685bf05a7e5f3ea4781

    • SHA1

      5d8b6268eeec9d8d904bc9d988a4b588b392213f

    • SHA256

      8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

    • SHA512

      814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

    • SSDEEP

      192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/StartMenu.dll

    • Size

      7KB

    • MD5

      4e96f412a8cc653053d5d918df6b0836

    • SHA1

      a3c7d59043feecb1603874b27c23d4166b341f2d

    • SHA256

      e4a54bfc327986a89165bdef361069810aaa985c3abecd442c786725fabaf977

    • SHA512

      2fec61b4ad31250bdbdbbfd551d831801790b96902c67200661e8f4f2753378bbf6c0c88b12e1be9173a29597827c1c4809511b6d52666dc3324bd7031c8229d

    • SSDEEP

      96:IiqA7bDe2xHkR1C41EhvSE+6nNtMn0iGd8CqRLqtJ1trRhElfL:IiqA7/ZH0uQMtcfCqo/tdgf

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      GCSkin/Default/BtnPot1.bmp

    • Size

      152KB

    • MD5

      312e09450face7ec524a8c1d312fc609

    • SHA1

      d0e47dd97bf1bdac1be340c9b1c32b4d5231b479

    • SHA256

      1dc055c9e558682672a629ab20f5a5258aa06d1911981248efe1c1753c5dcb46

    • SHA512

      f971ada4c9ca48b02d285d7be67e3ef0be669522be2aaaacbd42c2e0ec19e7fe64095ada9a5616a254fbb0d84b58061b7fae42b578a7bf3b34c89155b3e07e7a

    • SSDEEP

      1536:lM5Qq6HCY7fsNzWfJQJf6joK8pK2r6orYqxeaitHLr/To1T6fGqDEb6DbG:KZevN8pj6LPFffDzm

    Score
    3/10
    execution
    behavioral7behavioral8

    • Target

      LordTheme/Default/ChangeYellowBoyBtn0.bmp

    • Size

      152KB

    • MD5

      312e09450face7ec524a8c1d312fc609

    • SHA1

      d0e47dd97bf1bdac1be340c9b1c32b4d5231b479

    • SHA256

      1dc055c9e558682672a629ab20f5a5258aa06d1911981248efe1c1753c5dcb46

    • SHA512

      f971ada4c9ca48b02d285d7be67e3ef0be669522be2aaaacbd42c2e0ec19e7fe64095ada9a5616a254fbb0d84b58061b7fae42b578a7bf3b34c89155b3e07e7a

    • SSDEEP

      1536:lM5Qq6HCY7fsNzWfJQJf6joK8pK2r6orYqxeaitHLr/To1T6fGqDEb6DbG:KZevN8pj6LPFffDzm

    Score
    3/10
    execution
    behavioral10behavioral9

    • Target

      TKChatCtrl.dll

    • Size

      104KB

    • MD5

      704307aeddaa9334cbaff5bdf8bb6315

    • SHA1

      ab3d945511a4d54f5a1190eb3b7471ced382ef0d

    • SHA256

      687a5631b565d7807eebc30d06072a4dde0ad486ca25ee2593433b21597f93ee

    • SHA512

      d94d9d39099e943f9662d93a83bdbcee45d72a03e5054b30b369dca3154553be69123d28b8ee54f803f0953af18a6af9e2611f060bd269f5fdd916b7d2db71bb

    • SSDEEP

      1536:bakDKnpqdOEso0g/WyaAmFOvIvvdNNBx54I+FHwUqUoIoUjG84gwVdEFmU1:/DrdOEsbqavFR9NNn5/4YnEF

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      TKEmotionPlayer.dll

    • Size

      88KB

    • MD5

      c24b34d3db0d7169498dd72d3616e553

    • SHA1

      eb667d93cf738984f6352e0fa6ed303a506c6c4b

    • SHA256

      4aef9608b8b9163279b4e20034baa5e2aa04d1bbbfc469de8b722359a946a74d

    • SHA512

      1b3db054d62162956cde87e59b414bc05541e81336b9e34ee0146912efc90a91472d59a3e0dc449cd2b7c90c462e3c2ced78f89d932a457a48e4d473b7e3a192

    • SSDEEP

      1536:tM71YW6+VoegNCxOVBn2jdQUbBZJ1NBUP2d:y71L9Voeg8x+n2RQiF1N+PI

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      TKGC.exe

    • Size

      512KB

    • MD5

      909af925af3649e11df5f3679114fbf3

    • SHA1

      426183f747b8c8f53ff10dd4a4be5b0a635128e7

    • SHA256

      95ea70c131b74eebe97a4cd749aef46d784763ddaa17daa5438914465e0d136c

    • SHA512

      d2d1a4c260b15ce8d4f22e5b888f7272a39b5d7029b30d462a27dfcc04979cdd18ff9f71009484b41ba1641404e1afd742076c97ff897c613985c805dd4bca8a

    • SSDEEP

      12288:Fc9oE+P/IT04wTbdE+zs//hiFJ1nh5ohqzPTsZaZM:FAoE+P/404MpE+wY1hUqzPTcaZM

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      TKGMChatCtrl.dll

    • Size

      220KB

    • MD5

      9948f57b39020dd5e8af7e0751c8e1a1

    • SHA1

      7e76fe9920d11aa58e2a55a41c90fe32c1aac799

    • SHA256

      ebb7f3ee1516dd3cbd9922375e3449372ac1088a7885ba7547f91606eb9d499b

    • SHA512

      df63de80894f7b6df8b8422e45eceb27f432eb13cd5295dcc418142bf9c15b4fdff5a8e65fe41905a96f565f321d762662b24ee52c2bfc3ec9bd69b6144730ca

    • SSDEEP

      1536:s/5u4Bj+gIn6etom2xQYWvQlSReJKDPhncYcst6vw9z3I0jf5Sc4pulPCgJSaAG:1GjZqht7IWvQqeIKT6ff5ZAGTrfe1

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      TKGMChatask.exe

    • Size

      148KB

    • MD5

      f98e2d5fd76031a9484cd41dca2080cf

    • SHA1

      7cc1aea3cb9decfce45104eefed35b0bfd6826c6

    • SHA256

      d31717e06f84ad423c073fb2619ad530b0194bb6704b1610164b8b9f53c64fb1

    • SHA512

      9a2237708d0555f28b15b93871298ceefce490911a63fadbaf22c9723e6fe0d79ceef0bc64ee9e73a27e0ac87b512d1ffb22d2fb85c701393930cde12ff1277a

    • SSDEEP

      3072:jHumcNLtrF/XuQGOX2lezrzE2JTTqnwoj:jHuLrhXuQGknzRTqnwo

    Score
    3/10
    discovery
    behavioral19behavioral20

    • Target

      TKGameChatCtrl.dll

    • Size

      116KB

    • MD5

      8570186b548257fad8370242b9a35ce4

    • SHA1

      84c5304023704a603c2f203941b656643fc52240

    • SHA256

      941a929cb6929e1127c4c85d76cf20ffe8643623431d4def2a52d8ebfd20987a

    • SHA512

      831ac97afc09ed47e9102f40900a0247d290d1b11dadb652846c81d223abe2c16e4026b09a857a664ad1b43f2989902e7721eff7163769a85eb4ace88f4228e7

    • SSDEEP

      1536:Lnjkfgd2lhkgaiFnTyZ5QJaqC2qo36iPqvRhT2NLbHdnO/zSvNkIkEZi:Mgd2DTyZOfn96xvRhT2hwuOIkE

    Score
    3/10
    discovery
    behavioral21behavioral22

    • Target

      TKLobby.exe

    • Size

      857KB

    • MD5

      67efb7948bef34ef865101face1aa4c3

    • SHA1

      1c9d1801f0629e223cd75390ef751755bc98904a

    • SHA256

      9cd5e19bebe97548234ec4688ce734cfb0b341379b0c97e62d3bea6c85b7649e

    • SHA512

      687aa982275b7fdb704b27474c7b165615070f5707142c4b64add74b356656f3abc0ede21de706ddf6dbc41cedce53936fa513d6b2efd98b3d2208afb1c28602

    • SSDEEP

      6144:QCLXXsQ6c4fHsaPjx6uqWgEsbZxZN6e1HlKqOiEOwqnwoVrkBT7f01:lLHsQF4fBrFqWgEs3ld7OWwqwM1

    Score
    3/10
    discovery
    behavioral23behavioral24

    • Target

      TKLord.exe

    • Size

      128KB

    • MD5

      36fa7ee085efb8d61abd9e7530fc6d1d

    • SHA1

      05af1f3a3bc2cde1027abe584162576c99934d0f

    • SHA256

      2355c2aaa0ad6e66df0e89a619fcf9bb19b025a9536819269b189ee39aed82b2

    • SHA512

      3179c9bbdf9d9ad7c035cecc1e07c33797ec1a66eb613a0413fba68e136c09fc5811b30c209941fbfbde7170eb2416f7da9956d18e293327fdc699abc4230f64

    • SSDEEP

      1536:THmwpIK/oZPWlvbiuTJX+iKcqbiuTJX+iKc:TGwXlvbiuTJX+iKRbiuTJX+iK

    Score
    3/10
    discovery
    behavioral25behavioral26

    • Target

      TKLordDll.dll

    • Size

      489KB

    • MD5

      37f2bd8be6a0723e8f3e78a6d545df3b

    • SHA1

      4a7a4a97e5a7085bd14bccee6aa7ed781b0f48f8

    • SHA256

      43f14ec04539fd7ff9590c1f0fe671db92a86e2d505e56a2235c32fb9616c065

    • SHA512

      fa8c49fa53a36e22fd04f09ebd50b41efae483caf90d1cece8c999b13011a539a12b0330726aa709142397a5cd937b39ce8c94d5bfd7e4f97421324bb1bc8aed

    • SSDEEP

      6144:AG2k9YEfLU/F7LMME/wa+eG4S89ujYha6EEe1S4lQsk+fGPCGHL2eVjY0Y6kEKpC:fExc9po/7Qsk0mQujhYecqcdDq5/

    Score
    5/10
    discovery

    • Drops file in System32 directory

    behavioral27behavioral28

    • Target

      TKMatchInfo.dll

    • Size

      517KB

    • MD5

      4f726a226b27507210b6038aa8cd45b2

    • SHA1

      2ab7c37c5f6841c0bd43f6063dd60769f3d5e896

    • SHA256

      ab40543bf4b3d4fec854946114f46bc3a9ffab1ef2de7687c305514525907360

    • SHA512

      a87c110101c465458825bfd0b5e7e7837e37c7c3500337d617c93631b2f0e2bb9307ad5a2e36406ef3aee31f7f14d2827deb9c620ac8933ca9026c61b09eaca9

    • SSDEEP

      12288:g1EqrdTWUPaHPTgt4CZSzFie7gtL807jYjko:g1EqrYUP2ga9Ziee80XYgo

    Score
    3/10
    discovery
    behavioral29behavioral30

    • Target

      TKReplayPlayer.exe

    • Size

      116KB

    • MD5

      c13c3c2c39be5bdc5ef818cd4f2f6705

    • SHA1

      e25c43ced8d685f24945314eae580d88594bca70

    • SHA256

      4001c0094aac6c49d24dbe74e7484f2cb7e3ab6fa394342939526c4f91ce0c9d

    • SHA512

      558128a9835a62e73e3827d3776226eab6eda7de7d2cca8744d497b2b7e2da2c8e897793e7483b0865cedbaa7260b1f79b787e6e1c4a48c573b83fde373f1ce8

    • SSDEEP

      1536:yRFcn15W4s5jmzeV71DcZIgEXLjq+ibz70i7guGYq9MkHe0lBcoNYq:yb3J6eV75cZIg+m+iL7guDqnwoNYq

    Score
    3/10
    discovery
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

discovery
Score
3/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

Score
1/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
5/10

behavioral28

discovery
Score
5/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10