Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
Calculation.lnk
windows7-x64
3Calculation.lnk
windows10-2004-x64
3look/alsoThere.js
windows7-x64
3look/alsoThere.js
windows10-2004-x64
1look/forLook.bat
windows7-x64
1look/forLook.bat
windows10-2004-x64
1look/youIn.dll
windows7-x64
1look/youIn.dll
windows10-2004-x64
1more/thisWhich.bat
windows7-x64
1more/thisWhich.bat
windows10-2004-x64
1more/whichHe.js
windows7-x64
3more/whichHe.js
windows10-2004-x64
1more/willThing.dll
windows7-x64
10more/willThing.dll
windows10-2004-x64
10General
-
Target
bbad923f3102f064ecf37d42f8cbbfffc02266c8bd4636f052b7e8ecf5d78d9f
-
Size
1014KB
-
Sample
220919-ks5h9ahbh7
-
MD5
1a9efce93f302df5d769c2994a38f3a6
-
SHA1
1df1208c81c620f35cfb7f79b47b6ddac5cab438
-
SHA256
bbad923f3102f064ecf37d42f8cbbfffc02266c8bd4636f052b7e8ecf5d78d9f
-
SHA512
f7e262dde416d662437299b2cbf14c5a470c75c7fd19842d0e0bf2d2a3295e21c1d279f29ae744441478edeeddc0f7f348e16cbf040df30991f19f4fa5f80ade
-
SSDEEP
24576:fwadVwjHYHHWHCrwUwvPwewGHHQkg1H5wbgnSA4j5+/gH9YQUoIs95:fwadVwjHYHHWHCrwUwXwewGHHQkg1H5o
Static task
static1
Behavioral task
behavioral1
Sample
Calculation.lnk
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Calculation.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
look/alsoThere.js
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
look/alsoThere.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
look/forLook.bat
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
look/forLook.bat
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
look/youIn.dll
Resource
win7-20220901-en
Behavioral task
behavioral8
Sample
look/youIn.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
more/thisWhich.bat
Resource
win7-20220901-en
Behavioral task
behavioral10
Sample
more/thisWhich.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
more/whichHe.js
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
more/whichHe.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
more/willThing.dll
Resource
win7-20220812-en
Malware Config
Extracted
qakbot
403.892
obama204
1663313119
119.82.111.158:443
134.35.10.207:443
200.161.62.126:32101
70.51.132.197:2222
78.100.228.93:995
78.100.225.34:2222
45.51.148.111:993
186.154.92.181:443
66.181.164.43:443
217.165.85.223:993
70.49.33.200:2222
193.3.19.37:443
41.96.56.224:443
99.232.140.205:2222
88.231.221.198:995
76.169.76.44:2222
68.53.110.74:995
196.64.237.138:443
190.44.40.48:995
72.88.245.71:443
179.111.111.88:32101
197.94.210.133:443
81.131.161.131:2078
87.243.113.104:995
84.38.133.191:443
14.184.97.67:443
123.240.131.1:443
194.166.207.160:995
176.90.193.145:2222
180.180.131.95:443
191.84.204.214:995
191.97.234.238:995
41.111.15.78:995
91.116.160.252:443
2.182.101.3:990
99.253.251.74:443
154.181.203.230:995
64.207.215.69:443
85.114.110.108:443
102.38.97.57:995
109.158.159.179:993
186.105.182.127:443
71.10.27.196:2222
41.69.118.117:995
47.146.182.110:443
197.204.143.46:443
194.49.79.231:443
88.242.228.16:53
88.231.221.198:443
175.110.231.67:443
196.92.172.24:8443
186.50.245.74:995
100.1.5.250:995
78.182.113.80:443
41.96.171.218:443
154.246.182.210:443
81.214.220.237:443
187.205.222.100:443
95.136.41.50:443
190.158.58.236:443
105.99.80.23:443
105.197.192.21:995
181.127.138.30:443
167.60.82.242:995
196.112.34.71:443
88.251.38.53:443
68.224.229.42:443
37.37.206.87:995
37.76.197.124:443
188.157.6.170:443
68.50.190.55:443
181.111.20.201:443
31.166.116.171:443
84.238.253.171:443
197.49.50.44:443
169.159.95.135:2222
45.160.124.211:995
113.22.102.155:443
211.248.176.4:443
186.167.249.206:443
85.98.206.165:995
139.195.132.210:2222
182.213.208.5:443
201.177.163.176:443
45.183.234.180:443
98.180.234.228:443
184.82.110.50:995
179.24.245.193:995
94.99.110.157:995
181.56.125.32:443
119.42.124.18:443
181.231.229.133:443
2.89.78.130:993
70.81.121.237:2222
181.81.116.144:443
197.11.128.156:443
41.142.132.190:443
105.111.60.60:995
154.238.151.197:995
156.219.49.22:995
179.223.89.154:995
102.101.231.141:443
220.116.250.45:443
138.0.114.166:443
62.114.193.186:995
85.98.46.114:443
184.99.123.118:443
186.120.58.88:443
46.186.216.41:32100
156.213.107.29:995
27.73.215.46:32102
68.151.196.147:995
68.129.232.158:443
45.241.140.181:995
212.156.51.194:443
87.75.195.211:443
1.10.253.207:443
87.220.229.164:2222
109.200.165.82:443
41.105.197.244:443
190.59.247.136:995
219.69.103.199:443
61.105.45.244:443
105.105.104.0:443
169.1.47.111:443
210.195.18.76:2222
118.175.247.124:995
88.246.170.2:443
149.140.193.233:443
171.248.157.128:995
118.68.220.199:443
139.195.63.45:2222
118.216.99.232:443
181.80.133.202:443
102.40.236.32:995
46.116.229.16:443
61.70.29.53:443
179.108.32.195:443
171.238.230.59:443
81.56.22.251:995
31.32.180.179:443
186.64.87.202:443
85.139.203.42:32101
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
Calculation.lnk
-
Size
1KB
-
MD5
2faf93e37e2149ec7ae5e34d0cd11776
-
SHA1
a0c34b74fe1963d7fd087722973597201518f3ef
-
SHA256
8deaa2ebfa885a65ee6b444c7ad78fe4929bd43207ffc8294de59f520f056e05
-
SHA512
117141c2bf972edf5e27d9de04406c32854285b724ac92071c509efc2b55241b203ce40411af8bfc0afbf2d9b2f5c8222722eb21c520b449dd24e235ad7b415c
Score3/10 -
-
-
Target
look/alsoThere.js
-
Size
216B
-
MD5
0769476a8d0b51cfe367cfa61de77779
-
SHA1
93cf64d74a994fe311fc234e2b3b673665860ecc
-
SHA256
3ad606d88ceb522e228027f6b3bc2e614f1fed8ec6d50a435cb96a4ba53daf72
-
SHA512
46d98e080f51b0f972ae1d2fd2c28948669e616fed4f4afb7653cc88371f05e93dad2097ebe1f2a092175164ca8e6b9b7b51c69a6be286c9ba80d9681e31cbb6
Score3/10 -
-
-
Target
look/forLook.bat
-
Size
40B
-
MD5
e1db4cee84ea3e1523a97120a55f8320
-
SHA1
10d6450de83ce5f6979744e8d480322ab0492878
-
SHA256
31a1c694725a4686449cf63248e5a9e3adbdcd90a6aa80bc6614bf2ecf9d0000
-
SHA512
fdfb286b6c2112dfcf010b9130b0055f3481e061a7c0f41cd8bc88a849e30747858913184c7e90bf15a83ceaa3c2038437d6a38f6ba117a2817ee1a064ccd7cf
Score1/10 -
-
-
Target
look/youIn.db
-
Size
3KB
-
MD5
b83bebd6d4214aaddb333d720a56db15
-
SHA1
fe7562e8deb7a4ae47e5183cab2ee6e053a05bc2
-
SHA256
d0a3cdc531a3c40b67d9ff093dc96a19db3f5fe52d718468988b67f999b53411
-
SHA512
f19788a9417bfb3fed7326e7ff29b690217f354d02912fdf8460f7f0e9a3fe17aeab540f4b014d0996cff22fa9c2aaec73725a50c999f6cefed28d09d6dd2286
Score1/10 -
-
-
Target
more/thisWhich.bat
-
Size
44B
-
MD5
19fbc10ed6be8a22124544b116dc4613
-
SHA1
46b616f72bd8390940f629594f1abc0cbd68b8ce
-
SHA256
18ec28c59774203184b5c812d6736285d5b2c93a203a7b006a436cc4535e6a02
-
SHA512
1d17a619d84d4d46f82f8175c28c47a828d4923481693216b347bd3d5e7e8c6b5ac7b815c84ca63a8a5646b8a28e30da89fc5f4ee3295d0842e86aeb4848b919
Score1/10 -
-
-
Target
more/whichHe.js
-
Size
218B
-
MD5
eaef2f279f0182b871e2ab1772b08ee0
-
SHA1
79968b132a8b1061c995a855c8f2ebcfbca8b688
-
SHA256
f4f5a340a9c6a4b4948e9b335a375219a06d60835aad8ae6ef27c3b7030ad47f
-
SHA512
ee75b30e577f8730a14d69fb3dc6fabd91c31d8d86de90596da7388cf8b015115595b447c3046cb6de3dbc448039b2784b381a994b180c00ea4e8d0ac807f405
Score3/10 -
-
-
Target
more/willThing.db
-
Size
484KB
-
MD5
579a3194390b98e12529d0e1c429994a
-
SHA1
5f934ce5e39ca8f34a591067e39c9489f26bf8ad
-
SHA256
6e887e8f2f0bc1dcbf1b1fe444bcaf56ca5dcabab3c30bc9a74346e9fcbbf24e
-
SHA512
78115fa7e9477577bb02a89955971ec1910b1eb0a5406d981e7d392202ab611dff47dcc6a3fc6ee7ee13faa5081ec5899c9a0f4c66b6057c40ae91624a964004
-
SSDEEP
12288:A4/Wg5+3McbgH1yWmG2dOsG8ZoxRZ6s95r:A4j5+/gH9YQUoIs95
-