Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9733e3f15efe06bfbf6f1e890eee2f4b550f053acb18be931b1cb1c0c8f004ab

  • Size

    6.6MB

  • Sample

    230831-df1aface58

  • MD5

    4e040ae25a384a7559a0958e9c8ea0d5

  • SHA1

    bf71b7f230ff1b75074a68faff107653e7e63b80

  • SHA256

    9733e3f15efe06bfbf6f1e890eee2f4b550f053acb18be931b1cb1c0c8f004ab

  • SHA512

    0cf19d4a93a8d1d5ad86b560c19c7ac2873991d2f519f6da4bdab16b39a2856ef488ca2ffc3599a17a26217a24df9cd94ba74e3f131bd053992afa0f28111926

  • SSDEEP

    196608:d5S62JNK5FttlfuORveTBcMCwzUbiNhY6c+Ba4:d5S6EKX/lGOIBcM5zmEa4

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

http://abstractspoon.pbworks.com/f/todolist_exe.zip

Targets

    • Target

      todolist_exe/BurndownExt.dll

    • Size

      364KB

    • MD5

      1637efb75d9614f38f75ff52084c86ee

    • SHA1

      bbf5e87591d5028f92dc4e77bab660e2d57d9e4c

    • SHA256

      ee87aa4cc42b291109bea91f52862f47f15e5c91e23595f2b746d37d76e1dca5

    • SHA512

      51a3f1e2d12fb84953598bfaeb32fd79e43a234207f317b243ea6d57be2266897da66dee7c2fb156365fc077dcb4002f8a839fd19fd42d92e22c7bf523d712bb

    • SSDEEP

      6144:5qInjnTmaG5ILxCQwVxl18jAnsMov9s42M32Bm:5q0uaYCxCQwYjI342Mmm

    Score
    1/10
    • Target

      todolist_exe/Calendar.DayView.dll

    • Size

      52KB

    • MD5

      6bc4c1e0464e6d630c9f6be5cb3668f8

    • SHA1

      6d61a09bcc069635cbee94d8e610e51692036e5c

    • SHA256

      5e05c6fe4ebade9961a54db38444249d95478714c5838f71e194ea16d76bd076

    • SHA512

      d39a4d21af8af71411b40a4f9f08fd8a81e6295048d090122d1918bb9a4482836adaf66121355e97fe57c6b59d0aea730222e9963f2ca8d6ecc4b42aecf24882

    • SSDEEP

      768:E9fYhcE5sps8alfoXamK47YWNkUYIyUmgQY7NrU9jbthCaA6WUj:HhvQXaL47YWNv9mgQY7NrUDoaVWUj

    Score
    1/10
    • Target

      todolist_exe/CalendarExt.dll

    • Size

      348KB

    • MD5

      dfb8429cf20d2f6e2eeaebf37796772e

    • SHA1

      820f013adfc076d4808165cef883dd1dcc7d57c0

    • SHA256

      1605a9dd198299c80c38c3a03fe126b88dd6fa8078334bc4841d9f7bc689264f

    • SHA512

      66ce863956c1dd70823a5807881fe8844bcc7bfdec158b11ef65436c8aacc77cfa9ce58ea154ee27081c9ba6161c97928aa9624865f53dc2b772a5b2740285cf

    • SSDEEP

      6144:EF1TIOatBZ2dauLXheRaExU9h54drKw9cF4ai8FOaru+8x8NR:/ltRMhaaEyh54ZEi8Fh9Zf

    Score
    1/10
    • Target

      todolist_exe/CommandHandling.dll

    • Size

      6KB

    • MD5

      3afb83cb34e3e9295d6cb440769bfa93

    • SHA1

      50bd994c8cda3a20ff0010cc0feabc7799c6e5f2

    • SHA256

      3e57f1cff4f885f746e529f48ab3c003887a323aa9a23594aea41f9c74eb2968

    • SHA512

      b9eba8fcb256129b5a963944527b13ed78e5562ab6c39d857645e2bd747a7edef0ce5bf6cfd05f8f3de59e5ed5b830a57fb1de284607a47c3413b9894ca105ba

    • SSDEEP

      48:6Uq3VA4u6wWTy5S+/JNngNM2I/pKD3JIwZLXerOxli+ttquSu86l28DYFcSX8Da0:Wu61MhxNeI/k7JvurOjLKF/

    Score
    1/10
    • Target

      todolist_exe/ConvertRTFToHTML.exe

    • Size

      956KB

    • MD5

      e1d5beb9fb5427043382c5627c3ab14a

    • SHA1

      ac1f27a64cc8b73de2f2d8fdb42a0ad20d4e5efc

    • SHA256

      8a6baa508fb7036173adf3c9dab62aa2d880b3892e6c5bc92a4c3b766b1d52b1

    • SHA512

      03c4270df8fed4d86fe51dd8a1dd24ac5a8501de21111e3a0e8e7fb22918b15c9e116405a857d88eb79d7364a119cf495cbe2c4af42169f0b71b6f9fb90f63a9

    • SSDEEP

      12288:DOTanOvUed3ortRUAG4IUO8uLMj1rCs4ooapL8Pfv8SLct28Cqnqj:7MNop6AGj8US1VygLM3dY2ck

    Score
    1/10
    • Target

      todolist_exe/CustomComboBox.dll

    • Size

      26KB

    • MD5

      0985632036651e9f55d01cc4c18797a1

    • SHA1

      f4c44e4495e06b875097b98334044102886424e2

    • SHA256

      1a2c549d65a7530b68796a276dcf48844b9f3ba784556aa300b5c5cc71da1156

    • SHA512

      c4911e0fdc829fbae2ec42a69127a3918cb4453c8665667152c8a541ad5ce9ea9b548a879e75a3e13309ce6670ee126747a35c7e7b14b47cc3da17daaad719c4

    • SSDEEP

      384:rUAisbUAtKZ5g+q1buKL0miRAwdsTOaxkQ9TXwJ+KyeaxIa7RjhO2pIOy3GX:rUAisLtoq1bnw6k2P6+neaxZz23G

    Score
    1/10
    • Target

      todolist_exe/DayViewUIExtensionBridge.dll

    • Size

      57KB

    • MD5

      5c075f7c25241d9f70fe264517cd3467

    • SHA1

      30d991ecfeff26a4307e1e9b8d89bc81c87717f1

    • SHA256

      11c43eb7165e902500a09ed59d5e5763ce9b83af6a18a12e00aebf9fdcf55020

    • SHA512

      1f7d8c845df26ad3a82336dce4c0cdacb8b4c8c856ebdebb6287b05be73f8a5d1138efd88a2aadb0e0c830368316db42493a5c837410655cb7f7687603ba7187

    • SSDEEP

      768:QdjfUyw8kUT+Is0ViFebTuAdO+SOa5QDVpEX1/r2doIIPE0/O2/6CL3KY2VIlyQc:6UyhkZ4ACEl/icPEZjY2V4V8qDqT

    Score
    1/10
    • Target

      todolist_exe/DayViewUIExtensionCore.dll

    • Size

      79KB

    • MD5

      117990e6fce52c3f79ce7df971ad6706

    • SHA1

      a43766765a8174eef5117103ef5a5263a5418426

    • SHA256

      4501d67a8d7473f9e86cbaaf95a463184f2bd485ba4310f3e3d713039570272c

    • SHA512

      27aaeb289abdf963c8c619faee41f61e4cb0f355bea8b31b1cb31af710fe64ef1fb17274ea2021ed9a71dfe6755fa5932da2f405fca0629358ffb9dbe0054ac7

    • SSDEEP

      1536:Ms0OT0CVBodr2sRPiwafHKkDKvFuI9iECRc5Jth:n1fGZavKkDKNME

    Score
    1/10
    • Target

      todolist_exe/EncryptDecrypt.dll

    • Size

      48KB

    • MD5

      2f17d64d6f7fba7e7e9750495f926bb6

    • SHA1

      1dce4dbe2a9e4977a85f0451ed92f14e30c1b3e7

    • SHA256

      ca3412fa4113e1aed53100391639e350213dfea4fdfb6a75d8522001d640e5b1

    • SHA512

      0d806a248603b15da98f4e8a2d55a908f4d4d10aab11da81a41985703f59d2de274b6ce8fc2eee47f3f76dbc8b81279567bda6656e084e4e745a3eba1f32c254

    • SSDEEP

      768:SMEpPMoJ7GcIQQ64CuANMqWNU+K74FV2pRpWbSDHCHFAHoiYX:SNZCANMqqU+NV23S2IpX

    Score
    1/10
    • Target

      todolist_exe/FMindImportExport.dll

    • Size

      120KB

    • MD5

      a36c0bd65dff47d30294f1d7b350f62e

    • SHA1

      2ed1cbaf4601c270695ac0bde3e07a72ada7b6da

    • SHA256

      cc8845dc605e06f999e8ea3be16e3fba7bedfd2f2c3246e9fdc25701b48a0d74

    • SHA512

      109e16377ef1b036f40f13125998dc5fbabe0cc36a5fd85c375de24df2c1181dfa3b9a19ab21894607b244b3ae2cc055b93db3b89283258059e93543a919d9b9

    • SSDEEP

      1536:T9xt8P3UH7LwiBc01pfJ4MfQ2vAQF8hHfhA:1zc0vQ2vRFEfhA

    Score
    1/10
    • Target

      todolist_exe/FtpStorage.dll

    • Size

      292KB

    • MD5

      202f9bade54740771a80ac2cef8c0f17

    • SHA1

      7fd846a39ddb9c29347908ea6a5a0ae3af343a39

    • SHA256

      01ee60980b03c1a68e57d76ca03c929271a551f1e5efa243ab55c516c1c582e4

    • SHA512

      1af834caa6d6b9c566efbb65298c0f77ec43d58c165b763b67403faedc3818c1ed3d004c5b5f545a922e02e2ce7f037b55f8c1f1ab0a8802f92a156708c313f5

    • SSDEEP

      6144:sjhpQmqf/gCK19mJmryhv6hcGv7P7L4uvnFPzm/FYa:ujQmqn8Tmj1S7PdFrKz

    Score
    1/10
    • Target

      todolist_exe/GPExport.dll

    • Size

      128KB

    • MD5

      5c5034609b4912a85250f3a60daa7849

    • SHA1

      e1e0c0c9d8c7c5206a395a0533fd262d0d015f99

    • SHA256

      19245515f64e9ab3a553025f50dfe8393724117fc63baa2d37d1855ad488f206

    • SHA512

      108223cda1e27ddb7f646e55b201cde862e4abb7bf4cf77f4f55b63a56b096cd3ea72e1805783bca19a794e7fe4f18e91ef94ed015c483dc68fdfa7e007c2aba

    • SSDEEP

      1536:DdJmUUjnO8Q7MPtDPTecFqygW6rkvoC88n3otvtzMon9MfhcG2D4hsuQBdwlHyY:DqUUlt0yg2n3U7Iv2DvuQBdwRyY

    Score
    1/10
    • Target

      todolist_exe/GanttChartExt.dll

    • Size

      436KB

    • MD5

      d9c018c1c68db005c4dc270feacb867d

    • SHA1

      fd3d059b78aafcb5e9e059d92ecb5be460e420ce

    • SHA256

      15adeaf417fa0e85bf8a8eab37029ed22b3c1721b8b6cec589d35e305007a697

    • SHA512

      5fe49f0a827bd036662a1e6844f85364ded40a593747a8aa5b017bda61b6d6b8d08c7fced560a9c61ff48d2f848ed033fd55298f29c2f5f54c5d66cbf07f6a89

    • SSDEEP

      6144:wIoK43YUDXgl3t71fbb3Ace67Jb08oz9++3p+2RXCS09HS/PRpURS+8IzTavK:DMvDXglDDbAcN7Z0zf3xA+/PIJzoK

    Score
    1/10
    • Target

      todolist_exe/Gma.CodeCloud.Controls.dll

    • Size

      47KB

    • MD5

      f4e70aa2ba3cb8ab0a349266df88600c

    • SHA1

      b871c5b116e06eaf22f0c559e586efc9f35185e3

    • SHA256

      0a412d45db0f1f6270b62297ce50b75ba754a526ec76b2d73e0b51e4f63bf07f

    • SHA512

      249890e1a8e32ff2ad6599f099488ea9d639bbf5544ced84ee060f7c7689c49b43f581a7beb910fb80d8e9402357017a93c32f994ef378e6d26caebe274d7c55

    • SSDEEP

      768:3QWg+SuVaJa7CQrWcZllAaiMmQ1pmLYcoj3Vtc9LB:/g+1Ua7CQScCbGALW3VtcD

    Score
    1/10
    • Target

      todolist_exe/HTMLContentControlBridge.dll

    • Size

      54KB

    • MD5

      6db88b783703959532759525750b4dda

    • SHA1

      6fa5a983b049d989a424c4c799fceeaa911c4bb5

    • SHA256

      5b9c67f216b591cf25bc61b4d90010861d77532334ce711ecbd68b0779a64901

    • SHA512

      d9f965f68acc7decd8318e43d00bba0081d119da052c2ddd820560726f07ee57c6978f7fcbcf0919d42856f579ddc06e81956618cd9f45aebe01af53d056c9c5

    • SSDEEP

      768:eXL45EtaYkWDpD6lG7luy2QUUw5vX6SKNz/MA43svzWZoqaVKasF/BLXJq8AYzm5:e745Et7k6W+ZFTMYLWzRZJq8AYz98r

    Score
    1/10
    • Target

      todolist_exe/HTMLContentControlCore.dll

    • Size

      44KB

    • MD5

      14f372050f3c9700f8c2abc54f52a10a

    • SHA1

      62c30e317f01827a229af6731fce218986edffb4

    • SHA256

      ba171effb58e196239a03926554bd22c4f6de6c9b28cca8cbe855ef865b04d83

    • SHA512

      adedc08779ef5f152d7fac0dbf694a4d9d93f6e149329cf3bd92f10f751875bc2870fede610863564babc42ac7ba5fae5e00d51947eb48246e07a9069596ae8d

    • SSDEEP

      768:SnjkEOP4Z2nYlBhG2RmYz5uWka4Fk7/rYrrgRxK:kjk2ZBG2sWkaQkXCmxK

    Score
    1/10

MITRE ATT&CK Matrix

Tasks