Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

5

sogou_piny...74.exe

windows7-x64

7

sogou_piny...74.exe

windows10-2004-x64

5

$PLUGINSDI...re.dll

windows7-x64

6

$PLUGINSDI...re.dll

windows10-2004-x64

6

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ib.dll

windows7-x64

3

$PLUGINSDI...ib.dll

windows10-2004-x64

3

$PLUGINSDI...PY.dll

windows7-x64

3

$PLUGINSDI...PY.dll

windows10-2004-x64

3

$PLUGINSDI...64.dll

windows7-x64

1

$PLUGINSDI...64.dll

windows10-2004-x64

1

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$SYSDIR/SogouPY.dll

windows7-x64

3

$SYSDIR/SogouPY.dll

windows10-2004-x64

3

$SYSDIR/SogouPY.dll

windows7-x64

3

$SYSDIR/SogouPY.dll

windows10-2004-x64

3

$SYSDIR/SogouPy.dll

windows7-x64

3

$SYSDIR/SogouPy.dll

windows10-2004-x64

3

6.5.8.9174...re.dll

windows7-x64

6

6.5.8.9174...re.dll

windows10-2004-x64

6

SogouExe/H...Ex.dll

windows7-x64

6

SogouExe/H...Ex.dll

windows10-2004-x64

6

�...԰.url

windows7-x64

1

�...԰.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f10bea9816ca538e674731f62afe8a4_JaffaCakes118

  • Size

    29.2MB

  • Sample

    241003-rew4aasenf

  • MD5

    0f10bea9816ca538e674731f62afe8a4

  • SHA1

    61129f87e2a32234779733868d814d0ccfa7a3c1

  • SHA256

    ac4b45bc07af46efc0b0425b7c49b2b2b93781ebe8928fd5fd1e984b8b4b4a4c

  • SHA512

    06836a2727ff2cb40a8ad3838f9c6e6eb4495a761d500a9079fae471418fee74cd6d9bb6973e92f83195c3acf52560101d0c7a1ef424444400e78778432961ef

  • SSDEEP

    786432:sx5H5CVgd0qeSjPr9vnE/M+6/vsnDzqQ2khe:sx5H5JdbeSjPr9vnE/MLUnDE

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      sogou_pinyin_6.5.8.9174.exe

    • Size

      29.3MB

    • MD5

      1d4a0b5c0b191bf012ee6c2ca86d230f

    • SHA1

      ed00f7053ba90e7a8bbcd739bd41e71d4c233574

    • SHA256

      a6caa9b7336584e69a5be197fc8861fb1251ffdb39709a91bd43b485ecf3a85f

    • SHA512

      8c0dcf4711f6ec4fca069d63d3bb73cf1b481c07ce77a5904590488c0f554acdaffcbf2b268b4cf8225abca23ff7bd48b90df02bb9e0e002f4469724bb58a2fe

    • SSDEEP

      786432:idthn4NSbYcWorHVnTd+xWeMP/Etn3A2Gk7K:idthnTbnWorHVnTd+xWZstna

    Score
    7/10
    discoveryupx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/HWSignature.dll

    • Size

      73KB

    • MD5

      140d177622b1678c8fde00d74aac60d5

    • SHA1

      9f0c1710812e61e0b5c84f26294053e5807ffaaf

    • SHA256

      3052dd7fbd449eb5072a4d1d94c7c0147d5f027b734b812a048ff2a2fc29b34c

    • SHA512

      adf21b57b44826b2399ffe71babe1e2973706f4db7ce73d23897b5fab2e6712fe17e1595e56d859618b3421aff6c6d2c62805a7c496874bda340437ee237bc60

    • SSDEEP

      768:pijEFV3OaZPR+7PVxDMwE4w/Gj2jbUlFgSzGjSbieMJ8u1Bi0Wj5EEQHJ2Pyah:pTLOWpU7Q/tjbMyS4SbNOc75ERJts

    Score
    6/10
    bootkitdiscoverypersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      15KB

    • MD5

      6e663f1a0de94bc05d64d020da5d6f36

    • SHA1

      c5abb0033776d6ab1f07e5b3568f7d64f90e5b04

    • SHA256

      458b70e1745dc6e768d2338ccf3e6e86436488954ca3763472d8ffec4e7177e4

    • SHA512

      2a037c39f3a08d4a80494227990f36c4fef2f73c4a6ad74dcc334317a1372234c25d08d8b80d79e126881a49fa4b3f2fffe3604c959d9ceceb47acc7192cc6a5

    • SSDEEP

      192:VsIZHdT9uwYX94kYd2iCzHR+yK7imphLAykycpKPd5mj8ozxGUWumle:VsUHd9GN2d2iwl0impATIPdAj8Ov6

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/SetupLib.dll

    • Size

      793KB

    • MD5

      b151f73aa29acf29d322b2e2b9998a32

    • SHA1

      a519063b54a612d3e405917ad001b38164a5347d

    • SHA256

      a93d0a27a3dc33d9f2f467b1801e5d7d834a2c9a9e9bbeb9a43191593993c438

    • SHA512

      ddc4cb3f3f698972871ae3ccad48e2bb3e51c3b6b3016382ef4205a9900a608af9fed6f073fc7c1fe2d8b0da3f3c13bc39476f244cf2d8e588e5c250eb8abee1

    • SSDEEP

      12288:6LQClXVXk/635GMCQNCgypJvmQ1T/G6FiMW7JYFBcjYTIWBvpZHOa:xC5VX6N3lmQ1T/G6FiMYJYQUThBzua

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/SogouPY.ime

    • Size

      2.9MB

    • MD5

      7dce906798010dfb7271d7ce5c67fb7f

    • SHA1

      9ea1add198e29718edb03389b958dcbd52cfb4d3

    • SHA256

      04fa335d35132cd35a10ded034c4b179fd24e618268f98b1a7eacb72df102e3a

    • SHA512

      be8b958eb36e3f0069c84ffb05111c5bc261f4893811c3b6e06ffc2aab93ea322236cc9af3d3914a52bbecb41d6ac95559ae48ab6a0ace1ca0a7e681bff0cd03

    • SSDEEP

      49152:/TwIQuNNg3qPppy9eglOYXZaiRn1liTvSXh/CCw9:bRITH8YXZaiRn1Ls

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/SogouPY64.ime

    • Size

      5.0MB

    • MD5

      4833fc12bb6ede299c2647f12f32107a

    • SHA1

      7c91b1dcd18acecbc94d5ed005dfc1d064265eb1

    • SHA256

      48d68efd57fef871cacbb59ae9a3c9e5273abafa964200397f22403bb86b6461

    • SHA512

      afce7dd86e006ed029824970bc6b4f9a49c2740fc3fdab10047499f4ae5c327557674d71514205a2d6aa55f1596e30a1e3976205ccca046d68bce8980d042375

    • SSDEEP

      49152:Iq7UgzadBhtLHooW57IfOXLlan9FzktbvZ5l7nPDrRxiZBVIWTkW5IJ99IGFpyj:padBrLHo37+IrvXLRE

    Score
    1/10
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      b9f430f71c7144d8ff4ab94be2785aa6

    • SHA1

      c5c1e153caff7ad1d221a9acc8bbb831f05ccb05

    • SHA256

      b496e81a74ce871236abcd096fb9a6b210b456bebaa7464fa844b3241e51a655

    • SHA512

      c7ce431b6a1493fd7d1fe1b1c823ad22b582c43c8eb2fb6a471c648dd9df9953277c89932c66afd598d43ea36f4a8602e84cd175115266943071cbc8ce204099

    • SSDEEP

      192:hClej3uzvJwqJMQKN4GbeWZksMI4ETWcEbcBZ8ep2Kra7yOG:hCm2HgN4GbeWmbI4Eybogia7yO

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      $SYSDIR/SogouPY.ime

    • Size

      2.9MB

    • MD5

      7dce906798010dfb7271d7ce5c67fb7f

    • SHA1

      9ea1add198e29718edb03389b958dcbd52cfb4d3

    • SHA256

      04fa335d35132cd35a10ded034c4b179fd24e618268f98b1a7eacb72df102e3a

    • SHA512

      be8b958eb36e3f0069c84ffb05111c5bc261f4893811c3b6e06ffc2aab93ea322236cc9af3d3914a52bbecb41d6ac95559ae48ab6a0ace1ca0a7e681bff0cd03

    • SSDEEP

      49152:/TwIQuNNg3qPppy9eglOYXZaiRn1liTvSXh/CCw9:bRITH8YXZaiRn1Ls

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      $SYSDIR/SogouPY.ime~

    • Size

      2.9MB

    • MD5

      7dce906798010dfb7271d7ce5c67fb7f

    • SHA1

      9ea1add198e29718edb03389b958dcbd52cfb4d3

    • SHA256

      04fa335d35132cd35a10ded034c4b179fd24e618268f98b1a7eacb72df102e3a

    • SHA512

      be8b958eb36e3f0069c84ffb05111c5bc261f4893811c3b6e06ffc2aab93ea322236cc9af3d3914a52bbecb41d6ac95559ae48ab6a0ace1ca0a7e681bff0cd03

    • SSDEEP

      49152:/TwIQuNNg3qPppy9eglOYXZaiRn1liTvSXh/CCw9:bRITH8YXZaiRn1Ls

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      $SYSDIR/SogouPy.ime

    • Size

      2.9MB

    • MD5

      7dce906798010dfb7271d7ce5c67fb7f

    • SHA1

      9ea1add198e29718edb03389b958dcbd52cfb4d3

    • SHA256

      04fa335d35132cd35a10ded034c4b179fd24e618268f98b1a7eacb72df102e3a

    • SHA512

      be8b958eb36e3f0069c84ffb05111c5bc261f4893811c3b6e06ffc2aab93ea322236cc9af3d3914a52bbecb41d6ac95559ae48ab6a0ace1ca0a7e681bff0cd03

    • SSDEEP

      49152:/TwIQuNNg3qPppy9eglOYXZaiRn1liTvSXh/CCw9:bRITH8YXZaiRn1Ls

    Score
    3/10
    discovery
    behavioral19behavioral20

    • Target

      6.5.8.9174/HWSignature.dll

    • Size

      73KB

    • MD5

      140d177622b1678c8fde00d74aac60d5

    • SHA1

      9f0c1710812e61e0b5c84f26294053e5807ffaaf

    • SHA256

      3052dd7fbd449eb5072a4d1d94c7c0147d5f027b734b812a048ff2a2fc29b34c

    • SHA512

      adf21b57b44826b2399ffe71babe1e2973706f4db7ce73d23897b5fab2e6712fe17e1595e56d859618b3421aff6c6d2c62805a7c496874bda340437ee237bc60

    • SSDEEP

      768:pijEFV3OaZPR+7PVxDMwE4w/Gj2jbUlFgSzGjSbieMJ8u1Bi0Wj5EEQHJ2Pyah:pTLOWpU7Q/tjbMyS4SbNOc75ERJts

    Score
    6/10
    bootkitdiscoverypersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral21behavioral22

    • Target

      SogouExe/HWSignatureEx.dll

    • Size

      73KB

    • MD5

      140d177622b1678c8fde00d74aac60d5

    • SHA1

      9f0c1710812e61e0b5c84f26294053e5807ffaaf

    • SHA256

      3052dd7fbd449eb5072a4d1d94c7c0147d5f027b734b812a048ff2a2fc29b34c

    • SHA512

      adf21b57b44826b2399ffe71babe1e2973706f4db7ce73d23897b5fab2e6712fe17e1595e56d859618b3421aff6c6d2c62805a7c496874bda340437ee237bc60

    • SSDEEP

      768:pijEFV3OaZPR+7PVxDMwE4w/Gj2jbUlFgSzGjSbieMJ8u1Bi0Wj5EEQHJ2Pyah:pTLOWpU7Q/tjbMyS4SbNOc75ERJts

    Score
    6/10
    bootkitdiscoverypersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral23behavioral24

    • Target

      ԰.url

    • Size

      210B

    • MD5

      339ecc97cda3d35f18e90e9c727af4ef

    • SHA1

      5db53dc8c29a949787cafd6f90a05d73fb7c5377

    • SHA256

      649a8ff45f31d14248687850657b6814ba3b8ce566bc15362ea9ed10fed39ff2

    • SHA512

      8ce8edeb7a1b0914ca4e00a2b825b60de3074a6588d751bccb7711f8e71ddd7c20aae25c345faa7cb188cd21a72cd254337c5ebe82ec27e20c287c2ea71333a2

    Score
    1/10
    behavioral25behavioral26

MITRE ATT&CK Enterprise v15

Tasks

static1

upx
Score
5/10

behavioral1

discoveryupx
Score
7/10

behavioral2

discoveryupx
Score
5/10

behavioral3

bootkitdiscoverypersistence
Score
6/10

behavioral4

bootkitdiscoverypersistence
Score
6/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

bootkitdiscoverypersistence
Score
6/10

behavioral22

bootkitdiscoverypersistence
Score
6/10

behavioral23

bootkitdiscoverypersistence
Score
6/10

behavioral24

bootkitdiscoverypersistence
Score
6/10

behavioral25

Score
1/10

behavioral26

Score
1/10