Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3d202bce77d...18.exe
windows7-x64
3d202bce77d...18.exe
windows10-2004-x64
3$PLUGINSDI...64.dll
windows7-x64
3$PLUGINSDI...64.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...ew.dll
windows7-x64
3$PLUGINSDI...ew.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/inetc.dll
windows7-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
3$SMSTARTUP...��.exe
windows7-x64
3$SMSTARTUP...��.exe
windows10-2004-x64
3$TEMP/Kuai...te.exe
windows7-x64
7$TEMP/Kuai...te.exe
windows10-2004-x64
7$PLUGINSDI...64.dll
windows7-x64
3$PLUGINSDI...64.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/inetc.dll
windows7-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
3$TEMP/Kuai...te.exe
windows7-x64
7$TEMP/Kuai...te.exe
windows10-2004-x64
7$PLUGINSDI...64.dll
windows7-x64
3$PLUGINSDI...64.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/inetc.dll
windows7-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
3General
-
Target
d202bce77d5e2046cd866674a253d26f_JaffaCakes118
-
Size
5.6MB
-
Sample
240907-qfepyswbqr
-
MD5
d202bce77d5e2046cd866674a253d26f
-
SHA1
526a3ae81867b8f49e39aeceb32e96b90b08978b
-
SHA256
ca5cdb12d7446accecbcf99edc804f3b538cb96f0bedf407415cc5aaba7bb165
-
SHA512
57e1bf271aded004343956860dcc9639f667793aaf76e673f39d00bda7aa8846a32319fec719130d63161d26467b947cde54e5daf6f7894021935d24af2f2530
-
SSDEEP
98304:k/WmueH7WNwf4XhK32THmY4WDaXF8wOHkxPIccTPeJcycbMxhvTYsK+FO:k/IebWKwXDmYpawExPCyHhrHKgO
Static task
static1
Behavioral task
behavioral1
Sample
d202bce77d5e2046cd866674a253d26f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d202bce77d5e2046cd866674a253d26f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Base64.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Base64.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/KuWoNsis_new.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/KuWoNsis_new.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/inetc.dll
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
$SMSTARTUP/ֺ.exe
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
$SMSTARTUP/ֺ.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
$TEMP/KuaiWan_Update/KuaiwanUpdate.exe
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
$TEMP/KuaiWan_Update/KuaiwanUpdate.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/Base64.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/Base64.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/inetc.dll
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
$TEMP/KuaiWan_Update/PPSUpdate.exe
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
$TEMP/KuaiWan_Update/PPSUpdate.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/Base64.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/Base64.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/inetc.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
d202bce77d5e2046cd866674a253d26f_JaffaCakes118
-
Size
5.6MB
-
MD5
d202bce77d5e2046cd866674a253d26f
-
SHA1
526a3ae81867b8f49e39aeceb32e96b90b08978b
-
SHA256
ca5cdb12d7446accecbcf99edc804f3b538cb96f0bedf407415cc5aaba7bb165
-
SHA512
57e1bf271aded004343956860dcc9639f667793aaf76e673f39d00bda7aa8846a32319fec719130d63161d26467b947cde54e5daf6f7894021935d24af2f2530
-
SSDEEP
98304:k/WmueH7WNwf4XhK32THmY4WDaXF8wOHkxPIccTPeJcycbMxhvTYsK+FO:k/IebWKwXDmYpawExPCyHhrHKgO
Score3/10 -
-
-
Target
$PLUGINSDIR/Base64.dll
-
Size
32KB
-
MD5
fb6ffa30b708e9413d71a2c95558d0f1
-
SHA1
a4a67a7b6c53e47f9a741e06c701e03382dc548f
-
SHA256
3ae1c3fbf851e0de9865191b00b5fc26be32eb4f2ccb81b47e1488c2805402ae
-
SHA512
b1e4e9e263add6c6d9f7309d739375725f7c4afd645caebea903f7b8963c0ac8d2728dee3edd999f8496b100ba8bd5fd7e5c3c4c17ca0bbcd24923c0cb270415
-
SSDEEP
384:zFE2o6I2uTFKX342X5xzumltM//yaGPzUo7o5F8:zFES1uTE4W7zwmPzt7o5F8
Score3/10 -
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
12KB
-
MD5
1d5c649dde35003a618b9679d5d71b92
-
SHA1
0409bbab3ab34f8c01289cdd847b4d1a32d05b18
-
SHA256
0f4d3cee24e3f310fa804983c931d3628613988a24f0be7854f63a9309b8e45f
-
SHA512
b432ebcc52905662d61a3f17e08e209a3f9d836a9071b3b5e80070af7ebcf34cf66c44426dda041c2a258fda4787e5692e2b35acbcd73288fb84fe3c977bbfd9
-
SSDEEP
384:pKlm7i+c3QW6ckPhyDEaLnA2bbBBIXwZ:8qi8BcyhEhLBbbTI
Score3/10 -
-
-
Target
$PLUGINSDIR/KillProcDLL.dll
-
Size
32KB
-
MD5
83142eac84475f4ca889c73f10d9c179
-
SHA1
dbe43c0de8ef881466bd74861b2e5b17598b5ce8
-
SHA256
ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729
-
SHA512
1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1
-
SSDEEP
384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+
Score3/10 -
-
-
Target
$PLUGINSDIR/KuWoNsis_new.dll
-
Size
101KB
-
MD5
5b7d3fc9651089f373df83a9bdc922a7
-
SHA1
e0ee059b261e89bef6bdc9392ea4a579686a410f
-
SHA256
cb1e6695c6d55c3bd4b8d12cbe6a2e48687e72c84223256a3431560b2d4d7e59
-
SHA512
5feaf4de80e9057c9b3fc2d5ef2a5b7ef857fa7de67e5e5aa56915d06cd42b8544a8e707140bf182ad4907fc51a022fa597316f27e481abe170ba2548d64f911
-
SSDEEP
1536:D3h2lAZyQr64O173t81vfTvkrkuV4OclyTJafC1:Lh2l0yG6Z3O13y4OcluUC
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
10KB
-
MD5
4eff5fafd746f5decb93a44e3a3d570c
-
SHA1
a11aa7681b7e2df1c7f7492a127d332d1495ea8a
-
SHA256
cf61ddd15d63c25a12caee70f51ea736cfc02195c42e56ee01b33f689d3754c5
-
SHA512
cde82d2a1f28506e4c2264f6b82017a00af32f138ebcdbaf4cc58463870fa626f708aa57465294c5a6f096c886841e7b9112b85bf3ea2f1d8f2da816b51b2d72
-
SSDEEP
192:0OycJo/rJVCmIDNLU0dq5RD00lspbub76yL:6/QQ0d0RD0USq/6y
Score3/10 -
-
-
Target
$PLUGINSDIR/inetc.dll
-
Size
18KB
-
MD5
94a8ace2be90a687c1b1729c32c66e50
-
SHA1
94cff89cc170c00b1f849460f78cb12ab8730538
-
SHA256
1a6c160fd844dea35195371476119f91eab302d701b0f6f1c3fe87ad92cc93df
-
SHA512
ba23dfa7a29450451ac3f6ef6bf9e89352e1d17f7a2b7c7e5a87839becd6676542d2189d443322b3cad08b1bcac8851eebf9964fa37190e551f0bd717dcc5deb
-
SSDEEP
384:jlkcI7HjShsRSSMxCkRimJrr7Jsc8Xtya9zT0Ac9khYLMkIX0+GiBgAqkF:jEjVQRjRiml5vSQa9zSm
Score3/10 -
-
-
Target
$SMSTARTUP/ֺ.exe
-
Size
102KB
-
MD5
572fc6f9ce7c6afb32ce8d92192f999f
-
SHA1
ac2200d221b6be271d0c66c7ba41da7d1b264fcf
-
SHA256
2932b4a0f8f35ce23005fea434ccc5d309dc373d0f2b26ebc7ed76ff91852417
-
SHA512
77aba85163d82f6178ce3d8d1a5ac5d29903e296811fa182ed0dd9cdc3347c7e7e58bad5f57a4c7623a2684f6b3ce4eddfc5891151eb75df46aa1c7a78bd5291
-
SSDEEP
1536:vEIBeTPbC7junyIh3aZiLj0CkTDFx53LlOH8wixbZeC0HP+p/afCD:sLPmjuPO/x53LlE0xbZeCK+pyI
Score3/10 -
-
-
Target
$TEMP/KuaiWan_Update/KuaiwanUpdate.exe
-
Size
70KB
-
MD5
8b2fb19cfb18197fb55b3f21d58f2edb
-
SHA1
2af21e2d58e67075df24736789104a057692e1e8
-
SHA256
0787371e1a258899470a7d547d26e2856444e7e9158d8c96d65613145ffb80f4
-
SHA512
9c7c456597d67c90ca8aea5b6f4f807e386dd5dc5da34c84a1a6a64c33f11d81f32407d74ecc78315165c5c36a66b6f264f44f19abad4a7446a648bd3288696e
-
SSDEEP
1536:IZFwlrRfoowfoMTIxpIplqu4VGPJB6phruR/DZhbDfO9alVZ/afC2:IZGlFw7fonu4sPJB098/DjxT49
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/Base64.dll
-
Size
32KB
-
MD5
fb6ffa30b708e9413d71a2c95558d0f1
-
SHA1
a4a67a7b6c53e47f9a741e06c701e03382dc548f
-
SHA256
3ae1c3fbf851e0de9865191b00b5fc26be32eb4f2ccb81b47e1488c2805402ae
-
SHA512
b1e4e9e263add6c6d9f7309d739375725f7c4afd645caebea903f7b8963c0ac8d2728dee3edd999f8496b100ba8bd5fd7e5c3c4c17ca0bbcd24923c0cb270415
-
SSDEEP
384:zFE2o6I2uTFKX342X5xzumltM//yaGPzUo7o5F8:zFES1uTE4W7zwmPzt7o5F8
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
10KB
-
MD5
4eff5fafd746f5decb93a44e3a3d570c
-
SHA1
a11aa7681b7e2df1c7f7492a127d332d1495ea8a
-
SHA256
cf61ddd15d63c25a12caee70f51ea736cfc02195c42e56ee01b33f689d3754c5
-
SHA512
cde82d2a1f28506e4c2264f6b82017a00af32f138ebcdbaf4cc58463870fa626f708aa57465294c5a6f096c886841e7b9112b85bf3ea2f1d8f2da816b51b2d72
-
SSDEEP
192:0OycJo/rJVCmIDNLU0dq5RD00lspbub76yL:6/QQ0d0RD0USq/6y
Score3/10 -
-
-
Target
$PLUGINSDIR/inetc.dll
-
Size
18KB
-
MD5
94a8ace2be90a687c1b1729c32c66e50
-
SHA1
94cff89cc170c00b1f849460f78cb12ab8730538
-
SHA256
1a6c160fd844dea35195371476119f91eab302d701b0f6f1c3fe87ad92cc93df
-
SHA512
ba23dfa7a29450451ac3f6ef6bf9e89352e1d17f7a2b7c7e5a87839becd6676542d2189d443322b3cad08b1bcac8851eebf9964fa37190e551f0bd717dcc5deb
-
SSDEEP
384:jlkcI7HjShsRSSMxCkRimJrr7Jsc8Xtya9zT0Ac9khYLMkIX0+GiBgAqkF:jEjVQRjRiml5vSQa9zSm
Score3/10 -
-
-
Target
$TEMP/KuaiWan_Update/PPSUpdate.exe
-
Size
70KB
-
MD5
a2dcbc0d8280712e08a7e3ffc09e5f0f
-
SHA1
23030a02a7bfabc1d805c2bc29a164b22116b66f
-
SHA256
283fcffef2618d09604ffa7c3bdd7fffa34dc82b998121981cea2d69e2af0326
-
SHA512
da60697f6914f56576898f13f84b344fa6f49a6985862bcd0370168c8db931829b9a6a79ecc56d84e1d3a4675eb9096db948fece2b5f1c5764cfe599e7465cf5
-
SSDEEP
1536:UZFwlrRfoowfoMTIxpIplqu4VGPJB6pQuyLv+wTqfczImH9oTafCZ:UZGlFw7fonu4sPJB0Qhv+wGczb9b6
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/Base64.dll
-
Size
32KB
-
MD5
fb6ffa30b708e9413d71a2c95558d0f1
-
SHA1
a4a67a7b6c53e47f9a741e06c701e03382dc548f
-
SHA256
3ae1c3fbf851e0de9865191b00b5fc26be32eb4f2ccb81b47e1488c2805402ae
-
SHA512
b1e4e9e263add6c6d9f7309d739375725f7c4afd645caebea903f7b8963c0ac8d2728dee3edd999f8496b100ba8bd5fd7e5c3c4c17ca0bbcd24923c0cb270415
-
SSDEEP
384:zFE2o6I2uTFKX342X5xzumltM//yaGPzUo7o5F8:zFES1uTE4W7zwmPzt7o5F8
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
10KB
-
MD5
4eff5fafd746f5decb93a44e3a3d570c
-
SHA1
a11aa7681b7e2df1c7f7492a127d332d1495ea8a
-
SHA256
cf61ddd15d63c25a12caee70f51ea736cfc02195c42e56ee01b33f689d3754c5
-
SHA512
cde82d2a1f28506e4c2264f6b82017a00af32f138ebcdbaf4cc58463870fa626f708aa57465294c5a6f096c886841e7b9112b85bf3ea2f1d8f2da816b51b2d72
-
SSDEEP
192:0OycJo/rJVCmIDNLU0dq5RD00lspbub76yL:6/QQ0d0RD0USq/6y
Score3/10 -
-
-
Target
$PLUGINSDIR/inetc.dll
-
Size
18KB
-
MD5
94a8ace2be90a687c1b1729c32c66e50
-
SHA1
94cff89cc170c00b1f849460f78cb12ab8730538
-
SHA256
1a6c160fd844dea35195371476119f91eab302d701b0f6f1c3fe87ad92cc93df
-
SHA512
ba23dfa7a29450451ac3f6ef6bf9e89352e1d17f7a2b7c7e5a87839becd6676542d2189d443322b3cad08b1bcac8851eebf9964fa37190e551f0bd717dcc5deb
-
SSDEEP
384:jlkcI7HjShsRSSMxCkRimJrr7Jsc8Xtya9zT0Ac9khYLMkIX0+GiBgAqkF:jEjVQRjRiml5vSQa9zSm
Score3/10 -