Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Cab1.cab

  • Size

    533.2MB

  • Sample

    221228-al952sgh94

  • MD5

    47de7c17a1d12f538ef3c846c877f003

  • SHA1

    9b0aefeffa817b306c3719dc754c236db584b960

  • SHA256

    43c23200b0c8ac211c07c7367900d0c088db1cef3ddabc87e0692e14da37cd65

  • SHA512

    a8fc98116942f469de2f81b0801918c33ef40a2b4221efb320f1f0ae8d61524e879d681df774ca4e97fd6b911818fd51f72f5aa24dec1cb9fa70d9125a294c79

  • SSDEEP

    12582912:lGGwJd6jXQm2z7EWYPbl2t7t7jxTnygOmDrMUKlNStEvCdSQ4BBttl32c:ltXW9YP27tvJygl/+NStEJRBD2c

Score
3/10

Malware Config

Targets

    • Target

      BalanceFader.dll

    • Size

      115KB

    • MD5

      aa3950c4d657c9440754e3f919da307b

    • SHA1

      47e38195fa0e68858bc6ff6af383e7851ff2b9c0

    • SHA256

      ddcd2a959ca72bff685d23d78ad084e961d0f0d8e57e3242a00608e4b18cc5ff

    • SHA512

      50cbe9ab11627d6d06987361fd1f02eccd241085c8890f5658a6101734fba18ee5cd915a1bbfd22370ab04f31df77406a3d60db3f6992d7eb2e9ee7fdf05e56a

    • SSDEEP

      3072:FIelQgnUerM9QgxQ2kAQL5PnkKAvq4kP96:dlf0QgK2qLrQ

    Score
    3/10
    • Target

      Builder.dll

    • Size

      247KB

    • MD5

      7c693140f8b8678e9fe0d6258af96a55

    • SHA1

      0fa8faad6902267887f9a644defa23a5210ca397

    • SHA256

      da51ef9dc013d9527a440119a7962b67258055369039b6afd356f80e1b80006e

    • SHA512

      2f74ae52d1cca31babf9fa3be14b5dced723c9070336c67cac795462901559407f9052834fe5e28db3d0387be2f5251d306f312f00390c6dd9c8b12fc068474e

    • SSDEEP

      3072:t9IB0wJD88JMaGiH8oYns2ARhLgWfJyWHh2Oed5/EdvTjiOoY46kkSUoqI8o6UG5:td8JLGiMns2yhMWfNBO5+ohP8teu

    Score
    3/10
    • Target

      HalfSpeed.dll

    • Size

      240KB

    • MD5

      d7f3542f380c66242225b87524fd5fcc

    • SHA1

      4731a72be0121d545828a398731ae16b6888eff7

    • SHA256

      df89c7369bf3908861bee8e6f2a6ec6c63255c5fab97824ffcd201ddfb80d9d0

    • SHA512

      90cde4084f00dea0c3c6b4dd38caf4f1f2601eae215dde191e75c45555bc4961882b696aa336d455a7f78e44c785deb606ae9ee8af703e0be9353e014602166a

    • SSDEEP

      3072:DrR3zDAspT+1LkWRDTXRALXFCZXMOKYhcyh9oyeZCOoY46kYVbyzhBbWD2l:DNpT+eW1RALVCJnzhmohQ0nl

    Score
    3/10
    • Target

      LGMXPANDER.dll

    • Size

      673KB

    • MD5

      ceedc5450704875f692f120002bfd5e5

    • SHA1

      8356457452e55199ecbde682a22cf2143e80b43e

    • SHA256

      5862aa530d12b79745bb4229fb57c7130e64bb7a0389acd450757067a6406b20

    • SHA512

      2fb8d8f7b82350b5f47748a4921dd5c46a6ddc686604599cbb2a34fdba45feb2ee298bea6e27e467ace15049c0c909ff290de1613518fc6d4f9136c77c5ce6e0

    • SSDEEP

      1536:+kdABs58vSFYcNyhH8eBbJSn2K7B87Hz0tZo58VbbUaWhdu/iSFDLLFInLwIkTl:LdABhZjj7Tj1ShekIkR

    Score
    3/10
    • Target

      LoopCut.dll

    • Size

      102KB

    • MD5

      d539bae39478d21df21cd04bdadd7bde

    • SHA1

      ed7d18f9e33b1090a5be01cb4c1741877d5e44e5

    • SHA256

      575e79618848297b9c9322a14ce2ddf48f7b07845d579fd79a54805348f064a9

    • SHA512

      49ef505de59e99f9451310c5bf2a828c71a8b8177eced960ed6c6fded450e00588689637f842789d6a1f06cbf906e6da9f4d6567fb369df5dfa8657d0108de74

    • SSDEEP

      3072:nPrHCRnYxnVcVKPKoaoUdtd9N09dV33jGPWQ:ziRY5vPKoaBP

    Score
    3/10
    • Target

      Resize.dll

    • Size

      1.1MB

    • MD5

      0e9ff2f8b0480fbd3900710d35624cac

    • SHA1

      f1fd35b72a593aad9e562a46d046d700a89549b9

    • SHA256

      b77dd333bcd363fd2881ac24359a6da9038c2bba9c248fe2f9ccd8e38cb593bc

    • SHA512

      980bdd5281d455f84bd575bc6cd3a74d7d2a399852469c6b88eaa57e406cc636f81a9188f34d66620e39ccd38d8cb28d3b62058d5a067daa839b9d375dec4ce5

    • SSDEEP

      6144:djsEBemntxvisuBx9/uEoIypDs/yKtTByzduBoWZcfeEqByZAQF/I5tkHnL0:5txABx9FoCyKtTIzduBoW6vqByZAAC

    Score
    3/10
    • Target

      ShrinkLoop.dll

    • Size

      242KB

    • MD5

      7a77e9737c58c9477e1638017052b46b

    • SHA1

      f7be96eedab597eb6384b85ab8d2d66e575e5a94

    • SHA256

      0b5816618002a649bf70a444ce86d20d5e812d1414bbdc294811274f6bd1fcee

    • SHA512

      4a9bba64be44644febcf5bb384ed7aa8cfd36717ff8d3a51cba59a756a5709d4a4bc8eae29942556241797a4dd539f9d405078ae63474fc10be0c6b761d5092f

    • SSDEEP

      3072:Rd5qm/dx5/JD2TJap3oXu6220isZHOUfE+diFN/y+oY46Rx/moG:9x5/h283oXv2HIGE+Uoh2/8

    Score
    3/10
    • Target

      SimpleVolume.dll

    • Size

      101KB

    • MD5

      bfc068697c432cf9e10104ab32a4dbad

    • SHA1

      88ad3a49f18340111fa13d7d638850ed76a1ce4f

    • SHA256

      14e26ae1d584d09133c38043bb1dd132ad02a35ac0c6ea8d244bf54b497992aa

    • SHA512

      c8e77238de455d0d29c90f821bdc30942e79e06d10357b8c6a5dcdf06b6add8c20118851e28aecbe37ed55a51588da44243e9160d3c90989e6725970cf32ecad

    • SSDEEP

      3072:dxt2R9SoQoZ5OAap3T4Zkd91V19dtFO6HoO0ic0t:3t49lQa+p3T4sHkO

    Score
    3/10
    • Target

      Slipbrake8.dll

    • Size

      243KB

    • MD5

      87f335fcfb63c27d8172e680dbb643a6

    • SHA1

      520f9ea7310dc5c0d3954ee28cc4b0f02db8a47d

    • SHA256

      098b17efb7bf657be0f9549b5f5eddc92ae7d76717733d779df83ac71ee3f536

    • SHA512

      438a93b7a6589e4ba6869bb69b805aed2ac9d0b0348b45473175ba6c490de5a1758acadae05b0fbccea9e8f4e6b34f82debc1099a6a091ccbf1163e56a363d4c

    • SSDEEP

      3072:jck7fYDyn47xskvbJymPdUg2ego2/58UT+w/ydH/yboY46oZ0+dlGMh:Yyn4Vs6ymPdb2f+0+wJohn3K

    Score
    3/10
    • Target

      _img_278907_86178_None.gif

    • Size

      35KB

    • MD5

      682c800be8f9d7e068fad535892f85cb

    • SHA1

      c0ceb69faa76a7947639010d73cd85e16ad3c6df

    • SHA256

      6e0e0ad6bb2771ef4ff2069d4f82a9f1d04f096821c6fe6e6ca4bc88a69784fe

    • SHA512

      eb2a79a25327754e113f9b33efed63c88d9412ed95a3018a820d960acb3e0c6a5c3bc5015df0c3300a0fbaff0a4a85542971b873f841d33ce95dc1806c64a692

    • SSDEEP

      768:ULxzxo9EnrPWhH1OsFwKUKp1WoMg0ryeE4MKlN2Eiv64dZZjYm/Cwx+5BE:uxzPrOhVOUw01wg0ryebXDiv1dZNYmKU

    Score
    1/10
    • Target

      cud101.dll

    • Size

      401.4MB

    • MD5

      6cc0a8347017367f81a7e7e88618ac3f

    • SHA1

      39cb8b1985db1c390926f99f2a250729528422f8

    • SHA256

      498d9bb9d55da0c139a52ff4abe7ae5cd2d49576fe91c3ff1ea1f93730a7d180

    • SHA512

      17e4e56fc4562bc7cc820aa605d3dfadd16548d86aae3cfdc0f6aa7261f21fe2e09a5bc8ddabe2e359a999e0f06c55f474f8b6c6128e42eca288303e1257fd03

    • SSDEEP

      3145728:vZR6woJ9F2tjdkxz2W/xZfZbQk0BGNKvPzR+FHegIzNgyisnEDfOAwuuq:BRaFWJW/xZfgwIvPzR

    Score
    3/10
    • Target

      cuf101.dll

    • Size

      130.6MB

    • MD5

      1064b412fc8796837702683c51c3148e

    • SHA1

      c114ce229f76cd182b11c36803cd8b3989ce548e

    • SHA256

      855a7e0cd736c64ebe5ea243438fc4b6d8cbca24fc671ff0bddab9fe446d1fa9

    • SHA512

      973f26ad09163710960213205ca3aa4cc763b9bd71c1d0800830132725befe964b9478f017ded49929d18e27262d5a5b4ec1998402965eb17451d633df0b06b3

    • SSDEEP

      1572864:C0cy++W8BTOoeqBgznIDJBDf7VY1PPp/0jt1:Ay++Ws3bKwT7Vep/0jt1

    Score
    3/10
    • Target

      detune.dll

    • Size

      248KB

    • MD5

      f5cf3ea77c397714e5d4269f1e68e0e3

    • SHA1

      aabf89475446ed11aa9fbc562b99c75ed3816d82

    • SHA256

      e2642831d8e13c914f1294e1cea450465565dbb8630f05fddada68af95f14fd7

    • SHA512

      5648a46ac6e1df8d32a720c3b8248e57911cf2c5965659393c40bfe6fc9415f1e75a3277f62b795baa94d7f90c1535363f9899a5b5207e92a86e0f5a8dcba04d

    • SSDEEP

      3072:tmNbHHvTKGJfkqLv3D+VX234DQAU/KcMaCDXk6XMc/7woY46XrpO7I8iqYf+AlM:gXJ8qLGX2348Ad306WohlJ

    Score
    3/10
    • Target

      fade2Black.dll

    • Size

      245KB

    • MD5

      9263bdaf6e1b091e240a9d29ddb1478a

    • SHA1

      717f5023931c565d13495db985aa18027bfa69bd

    • SHA256

      6920b33037de2eec44b2f1640df61fde6a12d6991631bdb0947ed874753205ef

    • SHA512

      2d12e8a0f28c2663a66840021767c72912fa46089fb533eb8b29ed4b96da31791f3ce4d834162c78ce4f5a5e6ad964293dad595d93da74062725e8e9a3d943b9

    • SSDEEP

      3072:BB2w+HGt2LvWI8/3BS5JIKKIg1R2zF6WoD1pcD95ObiPy3oY46jVGxs0Uwu9f28g:7Yb8k5JIH12vML29cohGxTflg

    Score
    3/10
    • Target

      keyLoopDown.dll

    • Size

      237KB

    • MD5

      5eabd2370dac0b7786e6db9529b932ab

    • SHA1

      1755438384b7d24155d9af89db420974ee9ae6ca

    • SHA256

      e51d94f7484145e185967a949ef26249be9f0544e4d2c39e986921cc5134f834

    • SHA512

      98a47c0f5e7112a330ecda80ed2c911f7fa90a30c2b481cc9093866c8644d1625e0696f973f7ab1789b7939cf64cf88bfde45a2241ed19a0fff0c3889eafaa42

    • SSDEEP

      3072:o+bGD+rx1qraRRIo/a8ztUU3MlyByQ9pVEJGUhnNFNyeoY46b5i/R1sa4R:7x1qranIMztUU8lctJcHohCSP4R

    Score
    3/10
    • Target

      keyLoopUp.dll

    • Size

      237KB

    • MD5

      39ffb214acf78e946293fc0d7f736f08

    • SHA1

      0c577d59292c51fd2b374cd868b4c2360182db3e

    • SHA256

      a7c97d463d24512da3a9723601c069f58f55d76b6507784be23c2426e9df55e0

    • SHA512

      b11f976a47ee7e8441b3c4e37bcf535b5fe3f7be835afb9f86325520b20e9f351c243aff4413fa864c52a769f2f40293e6f0048a0bd827e77bbd53683045f4dc

    • SSDEEP

      3072:T+bGD+rx1qraRRIo/a8ztUU3MlyByQ9pVEJGUhnNFNyeoY46biT/A1sa4R:mx1qranIMztUU8lctJcHoht8P4R

    Score
    3/10
    • Target

      loopCount.dll

    • Size

      269KB

    • MD5

      bc1825a47053042e3349193598c960fb

    • SHA1

      f5f7de11ab75f24e5dbebac1ae400123aaddcc45

    • SHA256

      eb29b58086472533ae7f44e2470d71a17e3b124b1ccbfbb61c0cf28f54e34566

    • SHA512

      a2746ecc36bc931efc2e4e6f3556746e1a1a8ba269a8349a1d6bba1eb60729172fda8ff6d02e10b9a324c361ab08f26eb1a66467721f1ae66d76125d552e6704

    • SSDEEP

      6144:KaZtXYOcrkd9ZAfw+NMvwW8m8Q6ohv3aeC4:IeA4pT85Q6opf

    Score
    3/10
    • Target

      virtualFX.dll

    • Size

      251KB

    • MD5

      7c5db2f78f45d93a8dbdb7eaa62f757e

    • SHA1

      863274b98897b790d280f236479756a822e26588

    • SHA256

      6eac5f28ccdec67d3ad432d18cc99fd34d7ec95e97b50c802f6f11c491c1bdcd

    • SHA512

      7bdb414255ba64dbbe9199d817083ab46f79aee13df89b1b915219c7dc0bca78908602981d0d269c5fa9f6cb7bfc7cea3137e9980d5389c070f4ed161d3f6b51

    • SSDEEP

      3072:y+OwenYEz5kpvPKruNjDvNgCeTCOwfH73xNw8TiEtQBgBZVVB91Bumo3oY46dGX:KAXxjDvNqTOPzc8GohGd14XlY

    Score
    3/10

MITRE ATT&CK Matrix

Tasks