Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3Java反编...up.exe
windows7-x64
3Java反编...up.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows7-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDIR/nsWeb.dll
windows7-x64
3$PLUGINSDIR/nsWeb.dll
windows10-2004-x64
3$TEMP/fzhjd/1.exe
windows7-x64
7$TEMP/fzhjd/1.exe
windows10-2004-x64
7$TEMP/fzhjd/qqbq.exe
windows7-x64
7$TEMP/fzhjd/qqbq.exe
windows10-2004-x64
7Configuration.exe
windows7-x64
3Configuration.exe
windows10-2004-x64
3JDecompiler.exe
windows7-x64
3JDecompiler.exe
windows10-2004-x64
3jad.exe
windows7-x64
3jad.exe
windows10-2004-x64
3uninst.exe
windows7-x64
7uninst.exe
windows10-2004-x64
7�...��.url
windows7-x64
1�...��.url
windows10-2004-x64
1.rtf
windows7-x64
4.rtf
windows10-2004-x64
1General
-
Target
d37f18a2e2afdeb45c43d18343fc38f3_JaffaCakes118
-
Size
531KB
-
Sample
240908-em8e3avfnr
-
MD5
d37f18a2e2afdeb45c43d18343fc38f3
-
SHA1
d8cfd054e1a2261b3c28cb589b8d9a0c1bfcd85f
-
SHA256
5271e8ec687c71a26214ccdba7c9ab1b60569bd5a3b56bfba8a6d5f1a6940dbd
-
SHA512
35f363edf7c1f2e0b6aa589fd5e42867b930275e590251989f655cea6667d598e034738552cad6b7ff19de7373307bf57a261ee053ea226bb90b95cffa363ab3
-
SSDEEP
12288:j8B1JiS7h7hub0zxdjBdqJyrb+a3XIn5jkdzUImvwL:YBTWStYJK3I5jkdd4wL
Static task
static1
Behavioral task
behavioral1
Sample
Java反编译 软件/JSetup.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Java反编译 软件/JSetup.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsWeb.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsWeb.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$TEMP/fzhjd/1.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$TEMP/fzhjd/1.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$TEMP/fzhjd/qqbq.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
$TEMP/fzhjd/qqbq.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Configuration.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Configuration.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
JDecompiler.exe
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
JDecompiler.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
jad.exe
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
jad.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
uninst.exe
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
uninst.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
.url
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
.rtf
Resource
win7-20240729-en
Behavioral task
behavioral24
Sample
.rtf
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
Java反编译 软件/JSetup.exe
-
Size
534KB
-
MD5
55004c58f2a56ffc87fb622ced8c2a0b
-
SHA1
0cf880da57ae67a7ba6b0fa00a626e5a6f19a71c
-
SHA256
f1b344c75b8385bcf5b884434de7b3d7f4e5b4526cf62727b5fee8e9cbe2bf7c
-
SHA512
edff7ce4aa576ca709c430bf455bfafde0b1275931a5aa961e8750eec84c8f817bda4254d221816cea399768765c780a9994bfa6143b2067426c98be321249cd
-
SSDEEP
12288:AdnRdg61QMGojHcLnHJX6lkrplz+MolBkSr:8nz5Q9oDqIEK1liSr
Score3/10 -
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
12KB
-
MD5
43ba71f370a45aebcde86d76b83b208c
-
SHA1
1f14e3c253a5b7255b617084b45e51ef9d6717e4
-
SHA256
6d0a19614efb523f78477429df04b71459ee69b3d16231798dcfa539b3d2a64c
-
SHA512
36aaf1ccb7c1085ba9fbacbad6c1505c9e389be5e9bd52ee7046b48302b8239d6e34dfeeb32a2708c4fb7d5a85c1d202fbdabcdd6a2cced0099249640443b551
-
SSDEEP
384:0Klm7i+c3QW6ckPhyDEaLnz2bbBBIXwZ:hqi8BcyhEhL6bbTI
Score3/10 -
-
-
Target
$PLUGINSDIR/StartMenu.dll
-
Size
6KB
-
MD5
c0a60e2104eb0e4b0eac4eccdc048285
-
SHA1
7b14600bb1e3120b5cf9aa6d5fd41a6f20f62e42
-
SHA256
977c38bebc30b0b1de5338ab237ebfdfb7df87450f347d85fad28131f635c172
-
SHA512
d7bf507c90145373acda753b14eacc89190c61d760ea30aafc864498d09475dfd0336266eab4d95fd53ce03d1e57aa772e3ede29dc67b2f060ed12116e5c5130
-
SSDEEP
96:yLJdRZk8OkmE+WHw0FMXF6CWhFxKpKsaQhEfP0:yLjPk8OT30FFAHCP0
Score3/10 -
-
-
Target
$PLUGINSDIR/nsWeb.dll
-
Size
8KB
-
MD5
84bcf3c71e70d5a6e9dc07d70466bdc3
-
SHA1
31603a1afc2d767a3392d363ff61533beaa25359
-
SHA256
7d4da7469d00e98f863b78caece3f2b753e26d7ce0ca9916c0802c35d7d22bcf
-
SHA512
61aefa3c22d2f66053f568a4cc3a5fc1cf9deb514213b550e5182edcecd88fadf0cb78e7a593e6d4b7261ed1238e7693f1d38170c84a68baf4943c3b9584d48e
-
SSDEEP
96:9E1ZgHfHizBkiz1zCuNrwXTP8Jx/N6SCMeNV37bnwXwPML/bUdut5tCsPb2N6nOc:9E1ZkGdbiSCMeNN7LwAY/gd+Oc
Score3/10 -
-
-
Target
$TEMP/fzhjd/1.exe
-
Size
265KB
-
MD5
06638c30eb899390f4ceec295112c454
-
SHA1
3727f286cb1738d6b3006f63bdce0844d0883e6c
-
SHA256
1ad42831c0fe590dc36ca89933781e1771637d19dea98968dfaf77a9e18a7b21
-
SHA512
57795604d79cff4468d396b23de5a75bbd5b1dbbda0b67a270a151c717c26ec70534650e6fa12e18fe23f623b52c8eb143cc223b431a5245e7c509f53cc272fe
-
SSDEEP
6144:2u3dwQ0I2aFB2u0K/NAixgmMvYkuvPssyDn:nN9FQuX/9xgHvf0ssyr
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
-
-
Target
$TEMP/fzhjd/qqbq.exe
-
Size
48KB
-
MD5
5621b2732fc65b8d8db2c7dc5ef6c40c
-
SHA1
b991d38f0414b7f27c8f6de3eb498ba6876068e8
-
SHA256
bd911431bd69f8a09b08c587ccc9c94b3c1bc376506613f822880ac9adffe13a
-
SHA512
d57a3e0e5b14dd1e4e8384cc31336e8179c73fc17fcf07bf03680b7bce13c160ee0d3d61a7db74f75c7c6fa69fa215a778816e04468366c56d6f87ec706e230f
-
SSDEEP
768:84PgXuTkSBmVeRP+z2wYfxG7lWHE/nUF2kLpcqSFuHtLHkJI629a0gtKbAeavjwo:fPgXwpm4RmzZwCnUF2ICqdkJI6rlndP
Score7/10-
Loads dropped DLL
-
-
-
Target
Configuration.exe
-
Size
92KB
-
MD5
8d987ab8dc50678f5bbde25a68020830
-
SHA1
49df3c98d460d3695f68f2bfbc3e1e6266606cce
-
SHA256
edac84e4ae784749ee262229b5fab2cc8134c756d8b131586a69b73a50574eeb
-
SHA512
a8cfd73f9c893c802537ec5a7912726c9acce8836dff73689ee66e3751564bbea9e4755f7bdd266a0bd0b4e347239042f9c13f8a4c783d1321090576ac1701c4
-
SSDEEP
1536:ZVt39EaLU3EJTzQwDkWHVDlUEY0sZ+CTOXaQWt1YVWdVq:bLzTzQwNHVxG0sZiWt1R3q
Score3/10 -
-
-
Target
JDecompiler.exe
-
Size
60KB
-
MD5
81911d5647386050d62afb3c33d00220
-
SHA1
c23dd34202410ca95028fab4e8a57c2e055296e6
-
SHA256
e1223b67d25c0e06206949f00058a7cdc721303cf7e06f0eb6c12c27eca95f21
-
SHA512
d70e968e9b5b4dd58093c647a5a0d0d27a23aa9156566048b5cf002b561f91b9ac90ba29fdc886f244bc9a48620e2f910f5d7126b09a0fea92b5f562bedee4f2
-
SSDEEP
768:saFvPKBnIqpcM5Msz9b+jWTOPuGaQWixJyuB3UYVqtMGV4+1aL:s4OGsZ+CTOXaQWt1YVWdV+
Score3/10 -
-
-
Target
jad.exe
-
Size
435KB
-
MD5
211ac1a4d21adbe634cb7e44adc3e5c8
-
SHA1
d76c7b5a10649cba2b6a44eae2f2100a72a3ebd3
-
SHA256
bcb7c5beba3476d0f650ddac9ee4516ac38d150a5ab01c87906dac8b1c0adeda
-
SHA512
2fdbe1d4dc92af0ce8d50e71508848886097182f90b25e45c8b34a8356c6f7af1a60194a17fd173d88d48a6b2d8fd7aa7296915ede8855bb2b121ee06aeb68be
-
SSDEEP
6144:kXCxce5kJOZ7S9sLZLRYnjJ0nIQgyK5jZwJUFIYVWJJFSb5TOolOHDJV2fwdiMaD:KCxzqutLgKKygqI5TOolOjJ
Score3/10 -
-
-
Target
uninst.exe
-
Size
32KB
-
MD5
4aa2fa9cdb6e1fdc1ecb84c9dfbb3228
-
SHA1
103f1886c5dda222b50e548887131699804d8118
-
SHA256
2a60367d426fffc96060afd78d3d3bead370609f97ed44ff4e71abf5307ef9be
-
SHA512
a051320c4b763990a23ee437c8dd61936841fa610b9bd2e40cca552865a0b3aa803727ce30273707fc9b68648895355c5fc4dc493918968ac7f6a5582ee4a6f5
-
SSDEEP
768:D/DsaGV4M8SnjRk/dP4QY4Y/TdmJcVgBT+LERPAxVUqr:DLsaGuglum/TdW4tLERPAxVT
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
.url
-
Size
55B
-
MD5
228e258e694db7afae2546f9c21e50b7
-
SHA1
dd31552b0b48e8be1f21bdbf419e3ac6d1f72497
-
SHA256
c1e1588168de8f45d698eb22efaef600aedd66da4625805805889cb338b7df43
-
SHA512
af78104e478821cb09a5c2cb9f7efcf0668a5f9718f0b0e60cddb8b42bfa06aee25961ca752bc16b2110eaf8d98956e3535affe941d32c257ed4ebe3b3fd10b9
Score1/10 -
-
-
Target
.rtf
-
Size
27KB
-
MD5
c7736898053907366b4ced5299198325
-
SHA1
adbb73abe177cada5e511b0b6921b7bd1a634170
-
SHA256
84426d0da029d70e2e503dc2c6ef1d092d5293e60504443b6f896dcc349bcbd6
-
SHA512
e559fe82cdb84e4f25f592b505aa373490e380d4674c173381b360eb2942e17ef8ac8c66b20f484767c340169a5e0efdfa5fd4a2863786d6418bda3526e1289b
-
SSDEEP
192:ZsQlCQ32AB93ryt0N/yPfyZQ/oi+Y7F5ztvqlpGWuRXg4tmN:ZsQcQ3GWKTt0QhXgKmN
Score4/10 -