Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    DRV_Bluetooth_Intel_AX210_TP_W11_64_V2217002_20221019R.zip

  • Size

    6.6MB

  • Sample

    230108-fvadnsgb8s

  • MD5

    01d0bf130f7119c6a961f0dc3b01f079

  • SHA1

    3ce868731c3f3c071ced6076198ad82f044d338e

  • SHA256

    0cb8404062b04549b8b8ad5a6b27aeba1a001b0d602c79f196cc16fbd427aa0d

  • SHA512

    11018f46e40f499681ead361984e68f124cdcc3c4636105e59d016769e4edf79069f8a418a6f0724bd57a0f014c93ac0db5a2258f901c743198dd0dcfabc335f

  • SSDEEP

    196608:MHS04G/JxOVZFui7kAaxVo/uQTJQUeTa0INtNU2s6B:MX4IJxOVF7tkVaCQ0INtGM

Score
8/10

Malware Config

Targets

    • Target

      AsusSetup.exe

    • Size

      4.5MB

    • MD5

      f7fb56068b8070f3c68ddfbfd52983ad

    • SHA1

      fb8395c271a8a7b14655d57d3270684515ca828d

    • SHA256

      93fc1c1b990f8cabf405cf4910c9879eefd53ace9423e10434d59410c5bde5ab

    • SHA512

      63a9a62f9e588f63e15a938b2f42663fb64d66b7ac2340f543c98f6727bf7dc621cc1b35b480c4edfe2788b265e14d5a17fa49846c57984ac0a8ef1307670baf

    • SSDEEP

      98304:UmuSFdw5ujhIMdcbJFLOAkGkzdnEVomFHKnPM:Th6MdcNFLOyomFHKnPM

    Score
    5/10
    • Drops file in System32 directory

    • Target

      AsusSetup.ini

    • Size

      3KB

    • MD5

      923bf28589d8dc537572ad08e5f66083

    • SHA1

      503b55ec71457cf0dc4f4c4f9f94e060fb5620c9

    • SHA256

      99cffec8dcce3b49527bd8d63869a8307cc7679236bd494c0a10024ebed7feda

    • SHA512

      e69c4d1efc0251a0837d23a6a3bca192a6496a9a41983d6e43e3575898822581db3173c0fc8c4cbc6d49cd6a2f7b8d9077b73f35a4f36d128798c0458adf91af

    Score
    1/10
    • Target

      English.ini

    • Size

      182B

    • MD5

      df810ea5c667c5e649bd9b259eeb4fbf

    • SHA1

      2d3d5cb9750d7e137d5d1364fc2e977d10271699

    • SHA256

      1b2f01c62e4b5b32358c795bbb217e8b1f573ef58522f8157866a2c2b448d065

    • SHA512

      439322b96d2be0a59d5b20bff3e1ea03cc7b50136d684be10bbc4d30ad0401612992aa5321fc9dac364b819039ec21aadc804daca6b54a7d2a72ace739f71128

    Score
    1/10
    • Target

      French.ini

    • Size

      184B

    • MD5

      72efd2cdb206f907c374836fc08a8c71

    • SHA1

      0c28ddb8b7dddd210f6ad9a78d7080ab1d301e4c

    • SHA256

      c50438f32dc3d55dd81cffa9c86e9eccf40a5c95a243c07c032d05a37f0980a2

    • SHA512

      6885942876472ffcb1b1e7774409b5a26eb2527619516b2666286044565005134cfcccd96cc043539aeae4a488c9ddec9f4ec72bc092d60ccd130125baccf8b5

    Score
    1/10
    • Target

      German.ini

    • Size

      200B

    • MD5

      5e967303fbbaf180e125159f5ae45c60

    • SHA1

      652b8aa94d2022ee14b545149e3c8ec2658487cf

    • SHA256

      5fae16bdc57651ca5346e1146c633704d7ea309e00d6454bcfd85101f15d34f6

    • SHA512

      01610c277d7751d19dc664bd22802601078b3d8a8c4dac7881090540d37ad966e697af65d03672ac42dcd020777e233d3ea5464ca5b1965e4abb3c64e91174af

    Score
    1/10
    • Target

      Install.bat

    • Size

      308B

    • MD5

      05ea96804213722f35f7ca76e1e3e350

    • SHA1

      a873c5dc79a671ea5c33bc1a21f853b60a794f3e

    • SHA256

      fa439350a1259088825dd533111de0b43b8d851f68daa3eeb49b0d498834010e

    • SHA512

      08ee3f84b198fe1fbccca17260d6185ba37e87ffc5acf8eda1ecf9e4b670900b51d9917a2ef8ddd30308ea603ddac35789abb4ded8e05ada6a996fb5c14bcec7

    Score
    5/10
    • Drops file in System32 directory

    • Target

      Japanese.ini

    • Size

      176B

    • MD5

      c9d36ded08c21e3947ec0102e1bc3696

    • SHA1

      e87e87454611371abea7dd5d30d5f759696dbe10

    • SHA256

      52fd32eb725c1a8a993b22677d50109e56665b1fd4fb5f5651e34a7734722699

    • SHA512

      3e1296e5459b80b9a323dcf85db8ce45dc15e40eccfb5cf4a98418a4c8e7da22267d4c9f4d5cf9f5d3157a4734fbb1c427936de7bd29a9c33d7b2e2dc3c6e4e4

    Score
    1/10
    • Target

      Korean.ini

    • Size

      150B

    • MD5

      2c3602cf7bcbe10e754ffd2b2519ae0e

    • SHA1

      8238e7da7cdce53995eb0b7b65a08ea70cdf240a

    • SHA256

      2bb481ad18d1a7767e2a9f0ca349a74155c58213aab343276ecc425c985532ec

    • SHA512

      4fd8f60f1b4dab090d704aa1905b8a366b74b86df593e461c4a1d8bce4f89e9ecb5a7a961397b8910c6c530ce6c0542f3ed0655db73103cdeddfcccb3db07d7d

    Score
    1/10
    • Target

      Russian.ini

    • Size

      194B

    • MD5

      071d013a884e4ff88f3031ff738e9d87

    • SHA1

      13278ae08231c8fac7cd2aa4e2600a42e41973ef

    • SHA256

      f47b3eee8df6632ae0174e908946cfaa8c0b2e1d59b24692770280d8c07c5cb8

    • SHA512

      34aa40756b03f9dafa6f82487dfdcb5f176bb1c7a9ff7e1c6153cc4f689f6e376ebf5430e8f18ac9745367efce0a7704cce75c0898ca72b94a0a0ab9bf836cdb

    Score
    1/10
    • Target

      SChinese.ini

    • Size

      168B

    • MD5

      3d7bc31026e355851c4ce7bf50156684

    • SHA1

      10e7658bc12bbc2608c3ff60b64561122610779a

    • SHA256

      c4c3b036844bf5d000016f2db9ffb0e3c6572c5af45cc72592171e80af2dc75c

    • SHA512

      3ca441f96519f9117d8f357088ae440b96093fa123ca3e35e2e697f214fa506b866bf4a58379c152a4715a5dcc3e5cf55b0417e9ccb5acc681414ed7d2e4aa1d

    Score
    1/10
    • Target

      Spanish.ini

    • Size

      214B

    • MD5

      70358327fb9f7a57fc2fe88b799a302b

    • SHA1

      40c2c41d0b50dc27178ce9f28e3949e8d4a461be

    • SHA256

      8d227b733993f5f1816e7ef9c66be50b48d14a3e1ed010301d33239ebd12348d

    • SHA512

      8165279dc811c7536532cbe25d61a61c165adfc6e709e2d3de156b0859d24165ca3bac17ca4de0883589b2546eda88e2b0fc3aeadcf4afeb8592a3b9d7072fb5

    Score
    1/10
    • Target

      TChinese.ini

    • Size

      168B

    • MD5

      ffa04d6e35a495a54e39e308f22dceba

    • SHA1

      2254a9d6725b469f8aafaca839e1982bd5990eb2

    • SHA256

      9defc5629ee8ae560d9357dfeb4daeeb8ce607d5c4aa1f3dc6d74816ff57ff28

    • SHA512

      29a81499bd02ec648b2a5a9fc497b488bba9a9be1fa8e3a94941be0e20cf40be7e79c86d3c09b1aa909a355a72657b045bca2f3eda70037fc6884c2b59d774b9

    Score
    1/10
    • Target

      Ukrainian.ini

    • Size

      198B

    • MD5

      ae0746331affa1915d2e7fa9e7c2e3e7

    • SHA1

      a3b2597b3d5a7b0f2854a5759df98200648b514c

    • SHA256

      42af692bf96cad1943712fa0c3117232c645b22eab7070824062f848e96f3442

    • SHA512

      d27281396549fe9d2b6376bf1a296f2470a13b5098008125c914570f2432de94472a4119524409b7512a48a1f37f1a45e3a3572b5877be526f812c8259ae62a5

    Score
    1/10
    • Target

      ibtusb.cat

    • Size

      11KB

    • MD5

      0db4de032357484ccb341e63508d0550

    • SHA1

      43560859a2cd9d42c847da98f7aa8690bfd1ff77

    • SHA256

      1adfe363507187084bf4eff10c77c2ee8a5cf6c2761ee4f65762bfef224bb0b0

    • SHA512

      3ace2fe93f241f7f6a7700019c45ef23c964b81d300467085ae57710f3c8a37110a42b944680ed67626e77117dfc074ac6d6ee6292c6fdc4050d95781bad7b3b

    • SSDEEP

      192:1Xsask6JyynJC0coPOL7yKnUi8rFWQFNgyuq21eX01k9z3A8PZLF0V:18vJHn4CFRlul8R9zBZRC

    Score
    8/10
    • Blocklisted process makes network request

    • Target

      ibtusb.inf

    • Size

      35KB

    • MD5

      7be782b39efc950f66bfacf722649f63

    • SHA1

      eb313722e8fde13b7bdac599213736ae6450676d

    • SHA256

      b05b1f42c4fc01079bf1ab334bf281247b65b7c54c568fc9388d3ab7c6a657b0

    • SHA512

      e93bde2e05ba9737b5ecaa523b225cd1e8c9052414aea0d95b2acebdbcd8b6f9a1b90812770f2524c0977e16e711f49c72d23f3211aae13fb0d97e795d7c1cba

    • SSDEEP

      384:O2wRjCvPZk9dgPl9K9YExl9rX9gjl9UX9YMl989YZl9f9Cjl9MX94jl9sX9YBl92:oEk51Dj/FJ5JE8aI

    Score
    1/10
    • Target

      ibtusb.sys

    • Size

      6.3MB

    • MD5

      b5d96421a2bb00864c5865782ab76566

    • SHA1

      572c5a2f03c60d58cd4eb2eafa9af648590a76e5

    • SHA256

      15c52142638e99828fe4dc537fca15425c97a33262faf3fbc43d4eee44f45259

    • SHA512

      25ae4f539e808c78b62f270eb4cc668ce97635577300f0844950d26249f7808b61ad6a0e9aed7f84a09911582cca14f17b112831f4d20911d670b6ca1e22a839

    • SSDEEP

      49152:owNIuPb8MauFJV4bMSg3CRDs1kYY9iQlE6oYqe6jtQ3U7yFVWN2B/FweNsb7FnPe:/cxa2WKMC+gks6F2

    Score
    1/10

MITRE ATT&CK Enterprise v6

Tasks