Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    SetupX.zip

  • Size

    78.0MB

  • Sample

    230413-npkw8aba66

  • MD5

    d57805b40c401229cb247c9bacabdd4c

  • SHA1

    714f05cf814a5797a0d2851d34294bd1cfaf4630

  • SHA256

    951c96faf86b41a91c2a5e1eafe8b94e1bec28653d194e5320c4385a36cfae5a

  • SHA512

    d8956f81c7942cbf1b2405790a698d0c1bda11f44ce30d740b8645e0272b9cf7a7b19a076f11f37f0b2c9ce2b140b80b5f333de92de415282dc6460dd8413ef8

  • SSDEEP

    1572864:F4rH7saSM1M+sB7beYk9tMVCqzBBBX3eZp8rj2DKrPPij9S2SrIqyzRUR7:47saScDoXeYICljh3dGKrqgkQ7

Score
7/10

Malware Config

Targets

    • Target

      SetupX.zip

    • Size

      78.0MB

    • MD5

      d57805b40c401229cb247c9bacabdd4c

    • SHA1

      714f05cf814a5797a0d2851d34294bd1cfaf4630

    • SHA256

      951c96faf86b41a91c2a5e1eafe8b94e1bec28653d194e5320c4385a36cfae5a

    • SHA512

      d8956f81c7942cbf1b2405790a698d0c1bda11f44ce30d740b8645e0272b9cf7a7b19a076f11f37f0b2c9ce2b140b80b5f333de92de415282dc6460dd8413ef8

    • SSDEEP

      1572864:F4rH7saSM1M+sB7beYk9tMVCqzBBBX3eZp8rj2DKrPPij9S2SrIqyzRUR7:47saScDoXeYICljh3dGKrqgkQ7

    Score
    1/10
    • Target

      Data/Packaged/Main.ini

    • Size

      1KB

    • MD5

      7b53ebd64e5781e02eaefb6739a6b556

    • SHA1

      d5332b200cf5dcea0419afdb66a15d89b9eb619f

    • SHA256

      b975c9251ef7394dcc69f49e54dc5aa5e8df32f9b5e8c687484ddd840eb94d20

    • SHA512

      c4a25c07e19760547e91818ba6e9ec3fe89206c29429668731c7563b7407cb56d8c0adca519bf96dc82a1631e82cfe63b68439cad4102ea2a1df438bac8400fd

    Score
    1/10
    • Target

      Data/Packaged/Utils.dll

    • Size

      1KB

    • MD5

      73e051427246dd4ca45935b1a4bd7e2d

    • SHA1

      7216f05041252f1c3a9d84aacdf84ef62f1a1045

    • SHA256

      b7b8b412ab1e4f32da8a7cd42aeaa6e7d8d340cf14977d3e87f7d8f5eb689b0f

    • SHA512

      3fc10dea91962244389214d189c141466f5630e99b01af5761738ce884df14050cd08a43802dc45bbe9117290c34143b85a75694b6301954b51972180dca1e36

    Score
    1/10
    • Target

      Resource.dll

    • Size

      10.7MB

    • MD5

      641dadbb3f03938da99bf7c6c4cc482f

    • SHA1

      b21bdb69a17642ade8e62fcbd779ff1bc89ea809

    • SHA256

      883aefb081a1f9ef974ceb16e12c215e92fee13531c052279404bd11b2f8e479

    • SHA512

      7aea5f0db9b261a17801124d6eef0df2d3ada4a6f624c8f4f2ee519a61171a3f06de9032493e3309a1a982fd1218613dde73a942942df2a8ec367e7f66a531f5

    • SSDEEP

      196608:8B4DNtjVoWhIdAXplnpnh4uIKZ2K245peMKU3lRM9RVIO+QvSNG2uM+XGE4:04vWGIun1GKZ/2aZKU3lRvO+QvQgGP

    Score
    1/10
    • Target

      Setup.exe

    • Size

      6.7MB

    • MD5

      23d9a8cf15fe71598614e769e409c3df

    • SHA1

      b5b397f733c4acf378cf707c60db9488b38ce5a8

    • SHA256

      5a68fb28c84d3c0850006e6d6355075d99049adf5c939afba3c945bad7be673c

    • SHA512

      1b48ade8a793d4cdcd93b343175c1cc822ed3298c8293393edc702033b15e9fe9385967ca7fda33279dfa2790c59c9dad3c2181ed31a3f1fedaca4fd6f06e64f

    • SSDEEP

      98304:lc+kjotiAzy6lfxocFW2kTBrHJWGs2NyqeoNE/7SRYY2VymGu/m6zHAlA64TRRs:cjOpzhrt9kTVHJack+YlGlSRRs

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Target

      jre/Welcome.html

    • Size

      983B

    • MD5

      3cb773cb396842a7a43ad4868a23abe5

    • SHA1

      ace737f039535c817d867281190ca12f8b4d4b75

    • SHA256

      f450aee7e8fe14512d5a4b445aa5973e202f9ed1e122a8843e4dc2d4421015f0

    • SHA512

      6058103b7446b61613071c639581f51718c12a9e7b6abd3cf3047a3093c2e54b2d9674faf9443570a3bb141f839e03067301ff35422eb9097bd08020e0dd08a4

    Score
    1/10
    • Target

      jre/bin/JAWTAccessBridge-32.dll

    • Size

      14KB

    • MD5

      d63933f4e279a140cc2a941ccff38348

    • SHA1

      75169be2e9bcfe20674d72d43ca6e2bc4a5a9382

    • SHA256

      532d049e0d7a265754902c23b0f150d665a78a3d6fe09ad51c9be8c29d574a3d

    • SHA512

      d7a5023a5eb9b0c3b2ad6f55696a166f07fa60f9d1a12d186b23aaaacc92ef948cb5dffa013afc90c4bbe3de077d591185902384f677d0bae2ff7cfd5db5e06c

    • SSDEEP

      192:7pQMhM63XLPVT6MsMPapRuBUEp7nYe+PjPriT0fwtK:7muL7PV4aapRuBTp7nYPLr7J

    Score
    1/10
    • Target

      jre/bin/JAWTAccessBridge.dll

    • Size

      14KB

    • MD5

      b4eb9b43c293074406adca93681bf663

    • SHA1

      16580fb7139d06a740f30d34770598391b70ac96

    • SHA256

      8cd69af7171f24d57cf1e6d0d7acd2b35b4ea5fdf55105771141876a67917c52

    • SHA512

      a4e999e162b5083b6c6c3eafee4d84d1ec1c61dca6425f849f352ffdccc2e44dfee0625c210a8026f9ff141409eebf9ef15a779b26f59b88e74b6a2ce2e82ef9

    • SSDEEP

      192:0Usw4DPU3XLPVT6GsKOhWIutUinYe+PjPriT0fwyI8:ew7PVIKyWIutDnYPLr728

    Score
    1/10
    • Target

      jre/bin/JavaAccessBridge-32.dll

    • Size

      125KB

    • MD5

      2f808ed0642bd5cf8d4111e0af098bbb

    • SHA1

      006163a07052f3d227c2e541691691b4567f5550

    • SHA256

      61dfb6126eba8d5429f156eaab24ff30312580b0abe4009670f1dd0bc64f87bb

    • SHA512

      27dbda3a922747a031ff7434de5a596725ff5ae2bc6dd83d6d5565eb2ba180b0516896323294459997b545c60c9e06da6c2d8dd462a348a6759a404db0f023a7

    • SSDEEP

      3072:uN77TJSG78+5Orcj5K/e2Hrgc6kZAn1yEkBKMKy1Zf22QYHJiuzTl8ShzzM+64mn:uNXd178+5fJZnQLo

    Score
    1/10
    • Target

      jre/bin/JavaAccessBridge.dll

    • Size

      124KB

    • MD5

      c3ded5f41e28faf89338fb46382e4c3e

    • SHA1

      6f77920776d39550355b146d672c199a3941f908

    • SHA256

      4691603dfabe6d7b7beac887dadc0e96243c2ff4f9a88ce3793e93356c53aa08

    • SHA512

      23621f2856899f40cfa9858dc277372bfe39f0205377543eb23e94422d479a53fdf664f4a9a4515c2285811f01d91ab64a834a03a4d3ab0cb7d78f8af11135ff

    • SSDEEP

      3072:SdQ4jWJt4XChlFavveKSQ4gHK/e2Hrgc6kZAn1y1koKMKy1Zf22QYHJiuzTl8ShM:Sy4SJ1TFavvehc7ZnwEr

    Score
    1/10
    • Target

      jre/bin/WindowsAccessBridge-32.dll

    • Size

      95KB

    • MD5

      f78d2bf2c551be9df6a2f3210a2964c1

    • SHA1

      b6a4160eca4c0d0552234ff69bcfdf45f0a2a352

    • SHA256

      9d18e5421a8606985fa54d7cea921d1b8930358a2e4cdf5fdf2a8b3e4d857288

    • SHA512

      aac8622683be57518f8b03198a03bf1f760e082692c1fb6252e96cdba19d3ceb0a6786ccbd7b98830e865297308fa99dbbea464e41041abdda18aeb862ba993f

    • SSDEEP

      1536:/fHGbDtpt+WfGegcX30EJ4YHiYmRkgAPe+GP8uWg1kQOPt:/w2WfGe/30EWbY4Z+GpWuHOPt

    Score
    3/10
    • Target

      jre/bin/WindowsAccessBridge.dll

    • Size

      93KB

    • MD5

      e5a6231fe1e6fec5f547dfd845d209bc

    • SHA1

      3f21f90ecc377b6099637d5b59593d2415450d45

    • SHA256

      51355ea8a7dc238483c8069361776103779ce9fe3cd0267770e321e6e4368366

    • SHA512

      d5d20df0089f3217b627d39abd57c61e026d0dc537022fb698f85fa6893c7fa348c40295deec78506f0ef608827d39e2f6f3538818ba25e2a0ee1145fcc95940

    • SSDEEP

      1536:EHSB4i2hJwZaDEoDVzkhbyJCAqn9nV+1vkJnHBoY8BK5Hj:EJJwZWEoDVYby81yiBovkHj

    Score
    3/10
    • Target

      jre/bin/awt.dll

    • Size

      1.1MB

    • MD5

      159ccf1200c422ced5407fed35f7e37d

    • SHA1

      177a216b71c9902e254c0a9908fcb46e8d5801a9

    • SHA256

      30eb581c99c8bcbc54012aa5e6084b6ef4fcee5d9968e9cc51f5734449e1ff49

    • SHA512

      ab3f4e3851313391b5b8055e4d526963c38c4403fa74fb70750cc6a2d5108e63a0e600978fa14a7201c48e1afd718a1c6823d091c90d77b17562b7a4c8c40365

    • SSDEEP

      24576:68M4H6ioDs5FELnSbY6Ck2IlAnVCXQlFg3:9eaGnkXQlFQ

    Score
    1/10
    • Target

      jre/bin/bci.dll

    • Size

      15KB

    • MD5

      a46289384f76c2a41ba7251459849288

    • SHA1

      4d8ef96edbe07c8722fa24e4a5b96ebfa18be2c4

    • SHA256

      728d64bc1fbf48d4968b1b93893f1b5db88b052ab82202c6840bf7886a64017d

    • SHA512

      34d62beb1fa7d8630f5562c1e48839ce9429faea980561e58076df5f19755761454eeb882790ec1035c64c654fc1a8cd5eb46eca12e2bc81449acbb73296c9e8

    • SSDEEP

      384:1Td3hw/L3kKLnYgIOGOOssnPV5Lnf6onYPLr7EbH:1zw/bkKLt7KnddnfPC7S

    Score
    3/10
    • Target

      jre/bin/client/jvm.dll

    • Size

      3.7MB

    • MD5

      39c302fe0781e5af6d007e55f509606a

    • SHA1

      23690a52e8c6578de6a7980bb78aae69d0f31780

    • SHA256

      b1fbdbb1e4c692b34d3b9f28f8188fc6105b05d311c266d59aa5e5ec531966bc

    • SHA512

      67f91a75e16c02ca245233b820df985bd8290a2a50480dff4b2fd2695e3cf0b4534eb1bf0d357d0b14f15ce8bd13c82d2748b5edd9cc38dc9e713f5dc383ed77

    • SSDEEP

      98304:GyXul1SNceWfkD000V3wnIACM7g6cv/GZ:Q1SgfEP0ZwnIA97dcv/GZ

    Score
    3/10
    • Target

      jre/bin/dcpr.dll

    • Size

      139KB

    • MD5

      4bdc32ef5da731393acc1b8c052f1989

    • SHA1

      a677c04ecd13f074de68cc41f13948d3b86b6c19

    • SHA256

      a3b35cc8c2e6d22b5832af74aaf4d1bb35069edd73073dffec2595230ca81772

    • SHA512

      e71ea78d45e6c6bd08b2c5cd31f003f911fd4c82316363d26945d17977c2939f65e3b9748447006f95c3c6653ce30d2cda67322d246d43c9eb892a8e83deb31a

    • SSDEEP

      3072:aoGzTjLkRPQ9U9NuLqcNicj5ojGylYCE2Iu2jGLF5A9bE8LUekfCz:LGz/oRPGLJN1IGgYCE2L1F5A9bEGUeR

    Score
    1/10

MITRE ATT&CK Enterprise v6

Tasks