Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

神机妙�...js.exe

windows7-x64

3

神机妙�...js.exe

windows10-2004-x64

3

神机妙�...id.dll

windows7-x64

7

神机妙�...id.dll

windows10-2004-x64

7

神机妙�...s1.dll

windows7-x64

7

神机妙�...s1.dll

windows10-2004-x64

7

神机妙�...��.doc

windows7-x64

4

神机妙�...��.doc

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4370b7708f74e9f66606e2015f5bcc8f_JaffaCakes118

  • Size

    4.0MB

  • Sample

    241014-wfdqjs1hpp

  • MD5

    4370b7708f74e9f66606e2015f5bcc8f

  • SHA1

    7565c20a7a514cabbd4a15a6b1f450921b7beef5

  • SHA256

    e68b61dbc2fa9d40a8ec334f7b0b19f3eb626cca746b8df3a34e8cd80b64b68e

  • SHA512

    2192a3d71028be9fd8223c4dda03db4f1addb9c27dd432e87a8e2b7b96cf55d17c6575c8d043ac586467f592eb5a09f2fafc44d45053e30c05b3e8e65a6d22fe

  • SSDEEP

    98304:g9Vc0PapwaY1uKYNGJOAo6s6NeWBAbebED89tuiriqUmhFIY8D5aY:sSpwNKNGsqhAbeA49oiriqU01ub

Score
7/10
aspackv2discoveryvmprotect

Malware Config

Targets

    • Target

      神机妙算钢筋抽样软件最新版本-V9.39/gjjs.exe

    • Size

      1.3MB

    • MD5

      3b70328fb2b107690321a323f919d9d4

    • SHA1

      5b5854bc389b6778531d17e3a0d23e5ba5c1f8c3

    • SHA256

      6a6bacd12f41d06abc06ef6670c4edb083a6be93c0627a9ba288293011bc4b8b

    • SHA512

      d43890492f04cbd0eaa2fdd44c17619b92bfd3244a3430a2c2315c3e2a7661a2d31e150182ec1864862453fc4aba2f7c06261629cdd9a1371658fbde72e8a1c6

    • SSDEEP

      24576:E9kMJhRHJoKSvb9ZEs0JHrm+wBWjcAdWu9cMj7o0/HPUmxIgxqk4u9t+Ft7cM:+NHJo5zhoSic6Ka7oGPUTs4unC7c

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      神机妙算钢筋抽样软件最新版本-V9.39/hid.dll

    • Size

      313KB

    • MD5

      2888ec5fd706791994e168445d5d05c1

    • SHA1

      2413cbe822b9d24207dc647687cf7e163dd34105

    • SHA256

      2c855adafc11f9199c7cc64f8913304f7968409f63a1d40e65ce5c6538c81461

    • SHA512

      cf3371704eae772ee1518bfb455ca304052e98555261a285f8c4351c6b6b14acff80d9778dce30ac059c2de968d92c2a4c9806aa1bc94a5464e4c0f60c7351e9

    • SSDEEP

      6144:nK4o/8sNvZU56sg3OY3bGtrXzKeabPEYDmifsno:nKj/V4g3OY3evaXDmu

    Score
    7/10
    discoveryvmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral3behavioral4

    • Target

      神机妙算钢筋抽样软件最新版本-V9.39/sjms1.dll

    • Size

      746KB

    • MD5

      886f45fd0d9af230134acc3d84584560

    • SHA1

      e6847afdba306791d92a857874c35ffe37259816

    • SHA256

      75b7707d46b8e06855d1ef0ad845bad6205ecb55cb159277ead36cf4a347a816

    • SHA512

      5e40c96017df644777a37eee923249dfcb3ed5bda24795acacb73bd98fda841465a6fe098c3d166863cca5659f2182048ecc82e73bb2c8dd222daa52d59b849c

    • SSDEEP

      12288:3Il5HghGaU6gk4hJYOCQbE8KhxXA3+bGXjTf9Gz+hpvrYczOwZhzhQUwEB4INXz:3IlahGT6gfIIbENXJbGTzsz+hlsCZzQ7

    Score
    7/10
    discoveryvmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral5behavioral6

    • Target

      神机妙算钢筋抽样软件最新版本-V9.39/钢筋参数算量升级说明.doc

    • Size

      34KB

    • MD5

      c72b89b8b51f7959328a59efb2505abb

    • SHA1

      f9b5d865687838eb47e960dd848424f70bbe0cf6

    • SHA256

      8bdb51adf1212c27abf600f338ab39eece424a2d288ccd2e2e8f594ec02c8a81

    • SHA512

      64ca8b6b8d21d23a571dd47288efc4d023516c452ce945dca0b605b29d1c878c2c7a3fb43fe535f3a1ecd24bed984234298bf1f9faf56c641912ce71d3925199

    • SSDEEP

      384:6W6jrXHWfmSEwGjyf3h0B5YzEQCsR6Tu:6W6vXHWfNEwGjyfR0B5Hlu

    Score
    4/10
    discovery
    behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks