Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3db4fc048dd...18.exe
windows7-x64
3db4fc048dd...18.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ta.dll
windows7-x64
3$PLUGINSDI...ta.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...on.dll
windows7-x64
3$PLUGINSDI...on.dll
windows10-2004-x64
3$PLUGINSDI...7z.dll
windows7-x64
3$PLUGINSDI...7z.dll
windows10-2004-x64
3TeamViewer.exe
windows7-x64
7TeamViewer.exe
windows10-2004-x64
7TeamViewer...op.exe
windows7-x64
3TeamViewer...op.exe
windows10-2004-x64
3TeamViewer...en.dll
windows7-x64
1TeamViewer...en.dll
windows10-2004-x64
1TeamViewer...ce.exe
windows7-x64
3TeamViewer...ce.exe
windows10-2004-x64
3TeamViewer...es.dll
windows7-x64
1TeamViewer...es.dll
windows10-2004-x64
1tv_w32.dll
windows7-x64
3tv_w32.dll
windows10-2004-x64
3tv_w32.exe
windows7-x64
3tv_w32.exe
windows10-2004-x64
3tv_x64.dll
windows7-x64
1tv_x64.dll
windows10-2004-x64
1tv_x64.exe
windows7-x64
1tv_x64.exe
windows10-2004-x64
1x64/TVMonitor.sys
windows7-x64
1x64/TVMonitor.sys
windows10-2004-x64
1General
-
Target
db4fc048dd3971c76f902f2bc95c9a64_JaffaCakes118
-
Size
2.9MB
-
Sample
240911-15xxyawclm
-
MD5
db4fc048dd3971c76f902f2bc95c9a64
-
SHA1
2da8e716b5570eca8aa5c77dcb4e9d66581567b0
-
SHA256
705efa778e40a383fbe5a8acc5178ea636902ac47fe16db0f015d3840fd41d75
-
SHA512
8c75a1ee62c6506250119db9e07e1145484142b72b5438ceb4b08cfe722006ff0f4ad52c8634a1cde8669816b4f4c472bd7356d2051c4ea99c7781bfe5dcb3f2
-
SSDEEP
49152:HEN6oZDhMcToUcHx0ZrKSrseqPs4OB8ecNifpf0a7YPb/lIKftzDKtj36:kNjDhMOoUcHSr2s4OB+Mt0BT/lIKftI
Static task
static1
Behavioral task
behavioral1
Sample
db4fc048dd3971c76f902f2bc95c9a64_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db4fc048dd3971c76f902f2bc95c9a64_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/ReadCustomerData.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/ReadCustomerData.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/TvGetVersion.dll
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/TvGetVersion.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
TeamViewer.exe
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
TeamViewer.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
TeamViewer_Desktop.exe
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
TeamViewer_Desktop.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
TeamViewer_Resource_en.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
TeamViewer_Resource_en.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
TeamViewer_Service.exe
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
TeamViewer_Service.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
TeamViewer_StaticRes.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
TeamViewer_StaticRes.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
tv_w32.dll
Resource
win7-20240729-en
Behavioral task
behavioral24
Sample
tv_w32.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
tv_w32.exe
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
tv_w32.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
tv_x64.dll
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
tv_x64.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
tv_x64.exe
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
tv_x64.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
x64/TVMonitor.sys
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
x64/TVMonitor.sys
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
db4fc048dd3971c76f902f2bc95c9a64_JaffaCakes118
-
Size
2.9MB
-
MD5
db4fc048dd3971c76f902f2bc95c9a64
-
SHA1
2da8e716b5570eca8aa5c77dcb4e9d66581567b0
-
SHA256
705efa778e40a383fbe5a8acc5178ea636902ac47fe16db0f015d3840fd41d75
-
SHA512
8c75a1ee62c6506250119db9e07e1145484142b72b5438ceb4b08cfe722006ff0f4ad52c8634a1cde8669816b4f4c472bd7356d2051c4ea99c7781bfe5dcb3f2
-
SSDEEP
49152:HEN6oZDhMcToUcHx0ZrKSrseqPs4OB8ecNifpf0a7YPb/lIKftzDKtj36:kNjDhMOoUcHSr2s4OB+Mt0BT/lIKftI
Score3/10 -
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
14KB
-
MD5
0dc0cc7a6d9db685bf05a7e5f3ea4781
-
SHA1
5d8b6268eeec9d8d904bc9d988a4b588b392213f
-
SHA256
8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c
-
SHA512
814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0
-
SSDEEP
192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo
Score3/10 -
-
-
Target
$PLUGINSDIR/ReadCustomerData.dll
-
Size
64KB
-
MD5
703598aa5ff97f512112cd766543a2f1
-
SHA1
0bfb74b03227ee8510e153785edd76625404ab55
-
SHA256
5f76752e83789bb8184070d618d83f43c2f565cc7fad2c4266e44339223ba69b
-
SHA512
3eff4670a3c97ec931eb1240d22a943ad6b19ea07ce781dabcc656ae2049d36c42b8f5bf3ce59366057ea3ece8913e83da3ec98c2c1434edf144dd9d4731fe58
-
SSDEEP
768:TWaFM5hBUVVsDPytWyIBvsdfk3Nhs8o6S5uymhRv1OInQ/bTLZmTtxHWQ:CvnuV+TcWGIPOChRwIQ/XLQtxH
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
00a0194c20ee912257df53bfe258ee4a
-
SHA1
d7b4e319bc5119024690dc8230b9cc919b1b86b2
-
SHA256
dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
-
SHA512
3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/TvGetVersion.dll
-
Size
50KB
-
MD5
7d4cdffd78fa41a10e00cdfb899990d3
-
SHA1
51c445cc7933a92efe285b11d5a8a80dc69d1be1
-
SHA256
b5e3a463393887c08219366ac3efd60e8b4991df874586702950de2baa83104d
-
SHA512
8044c3a25957f68d7b7fd9d925c26f6726af9b29ad54eaf4b1eb1a3027f6f07670c678ef3dd2958130634cc49406b2d2378e20a35a43b8821fcd4355551122f7
-
SSDEEP
768:0VkG68qeXUmypSIRcu7Tx7Ss1xS+KCDpR/vO4nnZr11t5JgX:0Vm4Um4W4dLKopR/PnZft5
Score3/10 -
-
-
Target
$PLUGINSDIR/nsis7z.dll
-
Size
176KB
-
MD5
06ff2b95b8e123d32487b0cb73409031
-
SHA1
8cb3f584112db4e74cea4ed02d4ce0b3a5373bfa
-
SHA256
0dedad042a306da32784c3ce79bfac0475b827e416c17e1a1dfdb461151f4271
-
SHA512
174e7599ba87bc45111ce340d7563771353df71988d6b9094d8bdeab4b45ec730cbd2e6bf3943ad66daa02d7f1f1eac0020b987109fabed96b2e0def8d0602c6
-
SSDEEP
3072:rfSCQ4FYoKhEHvf4aytolZ8MMNjXtWXTkibb7zHetRYFJ8:HFYosEH3UtoX8fUtXPOm
Score3/10 -
-
-
Target
TeamViewer.exe
-
Size
6.2MB
-
MD5
ed51d984bc14ebb3b65825155efe2bff
-
SHA1
49f857d36b8f01fa1615c21990190099d0051034
-
SHA256
8fe23d189b1b527a0b473a0e19e4e5a80073c23a8f4406a492081637a5ba9b0d
-
SHA512
06749fa5965041b145ee53c202fb3eb1044eaedca2eecd9a012427c3cbf548c9daad43cf1e5d4bebe1a332786d36bf1f2058a8e8bcad3d774902df8966fac401
-
SSDEEP
98304:MQO7fXpxi3w+LO4x56OvRByeAp4LwNqiNh1eyRTxVkjko70hPHoDaV541o+pYCst:MQODp2O4iOWtqiQAZbIIBVg+
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
-
-
Target
TeamViewer_Desktop.exe
-
Size
2.2MB
-
MD5
03b9f2e1623aea488420eddefce6bcd8
-
SHA1
39d5fe5f0069784a9b589ff71b189c79e4adff6a
-
SHA256
80c74ebd55910208b59ca1e78f54ebbe516eaf26fb22cfe6d74de77b729f94c5
-
SHA512
2ed2240c7b5da9ec78afda5bf7a25113023d91299335bf494a7a4193318da9517348533225eecdff31cc15edb0d6b71c38587466f034f332b5e49e4524eed93f
-
SSDEEP
49152:zslvNKm5Pt2kiCaCeDEB+PGu+sZqT6LnFRKQyQx:KNK8PflhB+PLX9
Score3/10 -
-
-
Target
TeamViewer_Resource_en.dll
-
Size
228KB
-
MD5
1445c22839fa998896e33b8fe96f5d21
-
SHA1
a0f0e7f10e7337f18bbd947a983625347f0c9e1b
-
SHA256
7480448a483d55069801a65caabe855e904e6897abf87f25eeb754ad0ad40ea1
-
SHA512
682d83d286924368f1b552715d56bf5df94f15414eb42cec569a94dbf38ed93eaf668ad1ac991eb5282992fd893ee1fef93b932ce49d0aa72011760d179edad7
-
SSDEEP
3072:sDdofYRxYv0sSpMU4HBpkZelGR1VQZ8l9Dg4cLG3USJG0/9S9lc:xSh4HLkZ/AUzgc
Score1/10 -
-
-
Target
TeamViewer_Service.exe
-
Size
2.5MB
-
MD5
fb7236a8ca75af47f43eaa31690fc0cc
-
SHA1
a3a919d7bf361dfdb351c410329eedd2df127cda
-
SHA256
bf7660785c8d5a72d16b741099adef2ab21361367338b2d338a089f8ef996845
-
SHA512
c9cf288c275f6c6bc5c6b48fcbb5b3dde521f375c6869e47e33e1e95ef41c929c20f8e6413e499cdb54e4d39ca24e45a59bfe4dc8f7525e507283fb641569b2a
-
SSDEEP
49152:9Jsinj4zEXMnsNjT87PHypJSPHS2K6S9dvQMuVbMsEyV1:9JuzEXM+vQySPHS97dmBZ
Score3/10 -
-
-
Target
TeamViewer_StaticRes.dll
-
Size
2.3MB
-
MD5
bc50ee1253f36086642dacdc5da300c6
-
SHA1
36bbc57b948ebe7b037eb1b92ae2d728a9b05462
-
SHA256
59ce84559d2464ad8396d26bd49379bc0dade7a260405b4f0b69f7685d409231
-
SHA512
c7dcab3bfcbbddb1d1760e79672cf1ded8f21602577e90d3eff429e06573412d2b7cf1364a3155883b2001b4fb60248711f8d9323cb6c33e5af774d116527ac2
-
SSDEEP
12288:XL7FRMxerSaRcg2e2CPE8L+YoBSNPramjvT1VgB:X/prSazzL1T1SB
Score1/10 -
-
-
Target
tv_w32.dll
-
Size
64KB
-
MD5
97a9ce4475bf2ae973939d254220c8d3
-
SHA1
80743fbdca8e94dbc0f0994a05b024721744ad45
-
SHA256
af3e7327023404eb3683569fd1c7674f115f32cec3302581f30fb31def9eccc9
-
SHA512
522d91ab1dd15941e6e463bc8b4c08b7bd8027dffa026466fe09a5d49aa241a7e13b3cd5cbf398fdde2ccc86c98aa2360af4d9e21ef69dc54efc55dfb62bc371
-
SSDEEP
768:fTF1zKPPAlicj9J8yCbm314UXNYK2u9FkURUcTEBWyqPzvGLbt:r/uPoJjoUeuPfRMW9TGvt
Score3/10 -
-
-
Target
tv_w32.exe
-
Size
103KB
-
MD5
26ed0791f84f49571ab88cf7a8217f5c
-
SHA1
cb9cf94b44789493510c1e72cd2be201789b5ae2
-
SHA256
fbcacb11da83c431b9ec0a0b5f5fe39119eb605a108c27ad8025f70791c8bbc5
-
SHA512
aa43425aa39388fc5d1e50059faf8363c79d50a16be9a138ee6736420f3bafa2b96fe26e52ba0ae0abde33445c63cc6018addb4381a58bc1aaae1fda155f76ff
-
SSDEEP
1536:eQLuOPVckAlDOuWen7dqxCuRcCfKZjwkDi/w5JEYR5veoP:dLvakAxdcjkk/wpR5ve8
Score3/10 -
-
-
Target
tv_x64.dll
-
Size
76KB
-
MD5
f3eef539b438db4fa0a5afc8c2b7a566
-
SHA1
99910440cbae4764f7d3f6ad1e94d80838f4a877
-
SHA256
d2b3196d66fa8da6812ba5dcda91407a93439407f8257caa368495df81263b41
-
SHA512
e31fe6b58f0be5831931eff6537ff12f741bcf24093a3efe1f19325fae628b9e826102147588717a7a9e70f6a97d9e8778f81aa88b469bcfbb6fd85652590f81
-
SSDEEP
1536:bSOLiECsha6BD5C4U6mMxcyI7F8x9NKonB6:bSOkINUu5o
Score1/10 -
-
-
Target
tv_x64.exe
-
Size
126KB
-
MD5
4de0a31125c06c21f8948c06b7ca7ba8
-
SHA1
91da8431ba27ac76fc936275e24c259589d6cc08
-
SHA256
ec1ef3f745601e1fac0bb330f2bcb210137676a5343a0301475920441a890950
-
SHA512
e156f54fb4a25837814728630e68dbfb37c884d845fb21d225dcc2a7ca632525a64a12c36c4943e1b2c7dc5316cd8a444e5a72d1070ffc3fdbf33b1211babe5d
-
SSDEEP
3072:BUwSVG88g4k/sVlgGQIthclDmtHFVsmLxR2hmw5QVBo:BI0VlgZ+GlYFVs4RKgfo
Score1/10 -
-
-
Target
x64/TVMonitor.sys
-
Size
15KB
-
MD5
95314c3a08589471983c2c8173f23cda
-
SHA1
a84b8b7c7c08f4642655e2f1df9161b8d3b0b665
-
SHA256
05d30728d7204aba2437259ecf929a94e6573f7621baf35d76eba26f5489a6cf
-
SHA512
200c9af5a7ac032bcbde1830001f2c7cf4e9dd02b964a6bbdf7fe5e4bd29cd152a4fbea3bac53defa9f321e0417af3d170900ab3de390fcfc1d411237d238c06
-
SSDEEP
384:PxWDUVvF0r2UHKZCmYFJulYJLWOtbeFV6jlV:k0vFGXH7XuAL/beFVmP
Score1/10 -