Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
Calculation.lnk
windows7-x64
3Calculation.lnk
windows10-2004-x64
3look/alsoThere.js
windows7-x64
3look/alsoThere.js
windows10-2004-x64
1look/forLook.bat
windows7-x64
1look/forLook.bat
windows10-2004-x64
1look/youIn.dll
windows7-x64
1look/youIn.dll
windows10-2004-x64
1more/asOr.js
windows7-x64
3more/asOr.js
windows10-2004-x64
1more/knowYour.bat
windows7-x64
1more/knowYour.bat
windows10-2004-x64
1more/weNot.dll
windows7-x64
10more/weNot.dll
windows10-2004-x64
10General
-
Target
e2b57121e017b1fea3a3cea65d0d72752ff3993a0981af18a1b765e2cef1c94b
-
Size
1014KB
-
Sample
220921-meszeabfem
-
MD5
efe09a0b950dd6f29a411cf2e33c5cf6
-
SHA1
f33a243606b99ebcea841feb0d91c4ae6b95272c
-
SHA256
e2b57121e017b1fea3a3cea65d0d72752ff3993a0981af18a1b765e2cef1c94b
-
SHA512
009ec37ac9941985c995c994ab0ddb0ba63854ea752ac9ce9cf8d191196209144fbaf12298d3c7d23040b9116c98e4facd705f896c17472020465a02e2e37cc3
-
SSDEEP
24576:EwadVwjHYHHWHCrwUwvPwewGHHQkg1H5wbgnS24j5+/2H9YQUoIs95:EwadVwjHYHHWHCrwUwXwewGHHQkg1H5E
Static task
static1
Behavioral task
behavioral1
Sample
Calculation.lnk
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Calculation.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
look/alsoThere.js
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
look/alsoThere.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
look/forLook.bat
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
look/forLook.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
look/youIn.dll
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
look/youIn.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
more/asOr.js
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
more/asOr.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
more/knowYour.bat
Resource
win7-20220901-en
Behavioral task
behavioral12
Sample
more/knowYour.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
more/weNot.dll
Resource
win7-20220812-en
Malware Config
Extracted
qakbot
403.892
obama204
1663313119
119.82.111.158:443
134.35.10.207:443
200.161.62.126:32101
70.51.132.197:2222
78.100.228.93:995
78.100.225.34:2222
45.51.148.111:993
186.154.92.181:443
66.181.164.43:443
217.165.85.223:993
70.49.33.200:2222
193.3.19.37:443
41.96.56.224:443
99.232.140.205:2222
88.231.221.198:995
76.169.76.44:2222
68.53.110.74:995
196.64.237.138:443
190.44.40.48:995
72.88.245.71:443
179.111.111.88:32101
197.94.210.133:443
81.131.161.131:2078
87.243.113.104:995
84.38.133.191:443
14.184.97.67:443
123.240.131.1:443
194.166.207.160:995
176.90.193.145:2222
180.180.131.95:443
191.84.204.214:995
191.97.234.238:995
41.111.15.78:995
91.116.160.252:443
2.182.101.3:990
99.253.251.74:443
154.181.203.230:995
64.207.215.69:443
85.114.110.108:443
102.38.97.57:995
109.158.159.179:993
186.105.182.127:443
71.10.27.196:2222
41.69.118.117:995
47.146.182.110:443
197.204.143.46:443
194.49.79.231:443
88.242.228.16:53
88.231.221.198:443
175.110.231.67:443
196.92.172.24:8443
186.50.245.74:995
100.1.5.250:995
78.182.113.80:443
41.96.171.218:443
154.246.182.210:443
81.214.220.237:443
187.205.222.100:443
95.136.41.50:443
190.158.58.236:443
105.99.80.23:443
105.197.192.21:995
181.127.138.30:443
167.60.82.242:995
196.112.34.71:443
88.251.38.53:443
68.224.229.42:443
37.37.206.87:995
37.76.197.124:443
188.157.6.170:443
68.50.190.55:443
181.111.20.201:443
31.166.116.171:443
84.238.253.171:443
197.49.50.44:443
169.159.95.135:2222
45.160.124.211:995
113.22.102.155:443
211.248.176.4:443
186.167.249.206:443
85.98.206.165:995
139.195.132.210:2222
182.213.208.5:443
201.177.163.176:443
45.183.234.180:443
98.180.234.228:443
184.82.110.50:995
179.24.245.193:995
94.99.110.157:995
181.56.125.32:443
119.42.124.18:443
181.231.229.133:443
2.89.78.130:993
70.81.121.237:2222
181.81.116.144:443
197.11.128.156:443
41.142.132.190:443
105.111.60.60:995
154.238.151.197:995
156.219.49.22:995
179.223.89.154:995
102.101.231.141:443
220.116.250.45:443
138.0.114.166:443
62.114.193.186:995
85.98.46.114:443
184.99.123.118:443
186.120.58.88:443
46.186.216.41:32100
156.213.107.29:995
27.73.215.46:32102
68.151.196.147:995
68.129.232.158:443
45.241.140.181:995
212.156.51.194:443
87.75.195.211:443
1.10.253.207:443
87.220.229.164:2222
109.200.165.82:443
41.105.197.244:443
190.59.247.136:995
219.69.103.199:443
61.105.45.244:443
105.105.104.0:443
169.1.47.111:443
210.195.18.76:2222
118.175.247.124:995
88.246.170.2:443
149.140.193.233:443
171.248.157.128:995
118.68.220.199:443
139.195.63.45:2222
118.216.99.232:443
181.80.133.202:443
102.40.236.32:995
46.116.229.16:443
61.70.29.53:443
179.108.32.195:443
171.238.230.59:443
81.56.22.251:995
31.32.180.179:443
186.64.87.202:443
85.139.203.42:32101
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
Calculation.lnk
-
Size
1KB
-
MD5
c5fcb4868f3731290d1f459a88f51818
-
SHA1
ef26c48a1c1e47c243f4721eae81596e41c5cffa
-
SHA256
16f3dc6ae384410ccb680ef22d1afd78c9620f20e1b5b563c5c01eb18aede36b
-
SHA512
26d5251102cda61b25684a236b5900523321f9a20ac9d336a90c85163af54d27f0f4e46a9f32a22dfc145e6d7a53ace038b90e42abee7015971dccbf0d3a6a4a
Score3/10 -
-
-
Target
look/alsoThere.js
-
Size
216B
-
MD5
0769476a8d0b51cfe367cfa61de77779
-
SHA1
93cf64d74a994fe311fc234e2b3b673665860ecc
-
SHA256
3ad606d88ceb522e228027f6b3bc2e614f1fed8ec6d50a435cb96a4ba53daf72
-
SHA512
46d98e080f51b0f972ae1d2fd2c28948669e616fed4f4afb7653cc88371f05e93dad2097ebe1f2a092175164ca8e6b9b7b51c69a6be286c9ba80d9681e31cbb6
Score3/10 -
-
-
Target
look/forLook.bat
-
Size
40B
-
MD5
e1db4cee84ea3e1523a97120a55f8320
-
SHA1
10d6450de83ce5f6979744e8d480322ab0492878
-
SHA256
31a1c694725a4686449cf63248e5a9e3adbdcd90a6aa80bc6614bf2ecf9d0000
-
SHA512
fdfb286b6c2112dfcf010b9130b0055f3481e061a7c0f41cd8bc88a849e30747858913184c7e90bf15a83ceaa3c2038437d6a38f6ba117a2817ee1a064ccd7cf
Score1/10 -
-
-
Target
look/youIn.db
-
Size
3KB
-
MD5
b83bebd6d4214aaddb333d720a56db15
-
SHA1
fe7562e8deb7a4ae47e5183cab2ee6e053a05bc2
-
SHA256
d0a3cdc531a3c40b67d9ff093dc96a19db3f5fe52d718468988b67f999b53411
-
SHA512
f19788a9417bfb3fed7326e7ff29b690217f354d02912fdf8460f7f0e9a3fe17aeab540f4b014d0996cff22fa9c2aaec73725a50c999f6cefed28d09d6dd2286
Score1/10 -
-
-
Target
more/asOr.js
-
Size
217B
-
MD5
a968bd959f44b2fae5e16314b927a178
-
SHA1
18723a7f14d0050cb3841b9b973e4a8c33ddcfd2
-
SHA256
f835a6a48b29965655df5f187f8e2938de9398b7d2885584e4bcc43537f29091
-
SHA512
ee4ad02d36efdee0c43807089e25743051480db3eaa9c1946b2040b3ac522b8f3fe4690a9429de39048248733aa0c057bf47d59c23723c0030faf3194c7fe80f
Score3/10 -
-
-
Target
more/knowYour.bat
-
Size
40B
-
MD5
d4c613e20c77b30f8c7ca7cb20b352c4
-
SHA1
fff6cf16f72e7cac7b3910d4756e205c58ee1821
-
SHA256
8f37edd64e2338f75b97b5ee933f63d1eb12877cdc4a1343abbb9d146fbd2374
-
SHA512
d24cd84e2f9f5b83c2a68fbd38a2f69c7044af551f4d6aadd8718094a058a36a23206b150e17099e95f75f6b516eb10e9dfa3d5f7b30620f7ff8cdccec349cb6
Score1/10 -
-
-
Target
more/weNot.db
-
Size
484KB
-
MD5
b59639b2dc497a55e4c2c0cc2f71684e
-
SHA1
474302cffc8f04468e81c5bd53531ad160dde659
-
SHA256
7768f5c77fd87836f3b627bd0df72fbf5288f77e3ea538f699d431c720132777
-
SHA512
8beb6e66515263f3f57da2dd3212f135f322f73dd7fc15fb432646b74c750cd83219fd808d532d26e94f60cdd1ad970988819dbe8e974bc4c7195e3c85478773
-
SSDEEP
12288:A4/Wg5+3Mcb2H1yWmG2dOsG8ZoxRZ6s95r:A4j5+/2H9YQUoIs95
-