Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

mail_chang...40.dll

windows7-x64

1

mail_chang...40.dll

windows10-2004-x64

1

mail_change/_bz2.dll

windows7-x64

1

mail_change/_bz2.dll

windows10-2004-x64

1

mail_chang...al.dll

windows7-x64

1

mail_chang...al.dll

windows10-2004-x64

1

mail_chang...ib.dll

windows7-x64

1

mail_chang...ib.dll

windows10-2004-x64

1

mail_change/_lzma.dll

windows7-x64

1

mail_change/_lzma.dll

windows10-2004-x64

1

mail_chang...ue.dll

windows7-x64

1

mail_chang...ue.dll

windows10-2004-x64

1

mail_change/_ssl.dll

windows7-x64

1

mail_change/_ssl.dll

windows10-2004-x64

1

mail_chang...er.dll

windows7-x64

1

mail_chang...er.dll

windows10-2004-x64

1

mail_chang...-0.dll

windows7-x64

1

mail_chang...-0.dll

windows10-2004-x64

1

mail_chang...-0.dll

windows7-x64

1

mail_chang...-0.dll

windows10-2004-x64

1

mail_chang...-0.dll

windows7-x64

1

mail_chang...-0.dll

windows10-2004-x64

1

mail_chang...-0.dll

windows7-x64

1

mail_chang...-0.dll

windows10-2004-x64

1

mail_chang...-0.dll

windows7-x64

1

mail_chang...-0.dll

windows10-2004-x64

1

mail_chang...-0.dll

windows7-x64

1

mail_chang...-0.dll

windows10-2004-x64

1

mail_chang...-0.dll

windows7-x64

1

mail_chang...-0.dll

windows10-2004-x64

1

mail_chang...-0.dll

windows7-x64

1

mail_chang...-0.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    990ff8d1465fa4d17994890d0503bb9f828aafbc0102203b6b5195015fac113b

  • Size

    12.5MB

  • Sample

    231012-vgyaxacf7w

  • MD5

    51d52e009a99ee47cd75115a427adf3f

  • SHA1

    7e3cfee13bf0884ee80962dca21a1da438e6b766

  • SHA256

    990ff8d1465fa4d17994890d0503bb9f828aafbc0102203b6b5195015fac113b

  • SHA512

    75b6b08217a4c79d4dc5c35def227def754e311623fdf85d1a12f5f42cafb487055f2ae7a627de370a4f07651813d28a5f8ff7fb26b8fa4bda3e1dd766baaf46

  • SSDEEP

    196608:h5ElfaldPi38z3jyyEJT/GP2uv3dAIo4qI2NYy8TYADo3i0O8nXvb88o7c:PwmqUQ9svrqZNYyzAD0O8yg

Score
3/10
pyinstaller

Malware Config

Targets

    • Target

      mail_change/VCRUNTIME140.dll

    • Size

      106KB

    • MD5

      4585a96cc4eef6aafd5e27ea09147dc6

    • SHA1

      489cfff1b19abbec98fda26ac8958005e88dd0cb

    • SHA256

      a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736

    • SHA512

      d78260c66331fe3029d2cc1b41a5d002ec651f2e3bbf55076d65839b5e3c6297955afd4d9ab8951fbdc9f929dbc65eb18b14b59bce1f2994318564eb4920f286

    • SSDEEP

      1536:GcghbEGyzXJZDWnEzWG9q4lVOiVgXjO5/woecbq8qZHg2zuCS+zuecL:GV3iC0h9q4v6XjKwoecbq8qBTq+1cL

    Score
    1/10
    behavioral1behavioral2

    • Target

      mail_change/_bz2.pyd

    • Size

      82KB

    • MD5

      3859239ced9a45399b967ebce5a6ba23

    • SHA1

      6f8ff3df90ac833c1eb69208db462cda8ca3f8d6

    • SHA256

      a4dd883257a7ace84f96bcc6cd59e22d843d0db080606defae32923fc712c75a

    • SHA512

      030e5ce81e36bd55f69d55cbb8385820eb7c1f95342c1a32058f49abeabb485b1c4a30877c07a56c9d909228e45a4196872e14ded4f87adaa8b6ad97463e5c69

    • SSDEEP

      1536:PdQz7pZ3catNZTRGE51LOBK5bib8tsfYqpIPCV17SyQPx:VQz9Z5VOwiItsAqpIPCV1Gx

    Score
    1/10
    behavioral3behavioral4

    • Target

      mail_change/_decimal.pyd

    • Size

      247KB

    • MD5

      65b4ab77d6c6231c145d3e20e7073f51

    • SHA1

      23d5ce68ed6aa8eaabe3366d2dd04e89d248328e

    • SHA256

      93eb9d1859edca1c29594491863bf3d72af70b9a4240e0d9dd171f668f4f8614

    • SHA512

      28023446e5ac90e9e618673c879ca46f598a62fbb9e69ef925db334ad9cb1544916caf81e2ecdc26b75964dcedba4ad4de1ba2c42fb838d0df504d963fcf17ee

    • SSDEEP

      6144:7t9gXW32tb0yf6CgLp+E4YECs5wxvj9qWM53pLW1Apw9tBg2YAp:7ngXW3wgyCiE4texvGI4Ap

    Score
    1/10
    behavioral5behavioral6

    • Target

      mail_change/_hashlib.pyd

    • Size

      63KB

    • MD5

      4255c44dc64f11f32c961bf275aab3a2

    • SHA1

      c1631b2821a7e8a1783ecfe9a14db453be54c30a

    • SHA256

      e557873d5ad59fd6bd29d0f801ad0651dbb8d9ac21545defe508089e92a15e29

    • SHA512

      7d3a306755a123b246f31994cd812e7922943cdbbc9db5a6e4d3372ea434a635ffd3945b5d2046de669e7983ef2845bd007a441d09cfe05cf346523c12bdad52

    • SSDEEP

      1536:6TO+CPN/pV8ETeERZX/fchw/IpBIPOIVQ7SygPx:mClZZow/IpBIPOIVQyx

    Score
    1/10
    behavioral7behavioral8

    • Target

      mail_change/_lzma.pyd

    • Size

      155KB

    • MD5

      e5abc3a72996f8fde0bcf709e6577d9d

    • SHA1

      15770bdcd06e171f0b868c803b8cf33a8581edd3

    • SHA256

      1796038480754a680f33a4e37c8b5673cc86c49281a287dc0c5cae984d0cb4bb

    • SHA512

      b347474dc071f2857e1e16965b43db6518e35915b8168bdeff1ead4dff710a1cc9f04ca0ced23a6de40d717eea375eedb0bf3714daf35de6a77f071db33dfae6

    • SSDEEP

      3072:A4lirS97HrdVmEkGCm5hAznf49mNo2NOvJ02pIPZ1wBExN:VlirG0EkTVAYO2NQ3w

    Score
    1/10
    behavioral10behavioral9

    • Target

      mail_change/_queue.pyd

    • Size

      31KB

    • MD5

      f00133f7758627a15f2d98c034cf1657

    • SHA1

      2f5f54eda4634052f5be24c560154af6647eee05

    • SHA256

      35609869edc57d806925ec52cca9bc5a035e30d5f40549647d4da6d7983f8659

    • SHA512

      1c77dd811d2184beedf3c553c3f4da2144b75c6518543f98c630c59cd597fcbf6fd22cfbb0a7b9ea2fdb7983ff69d0d99e8201f4e84a0629bc5733aa09ffc201

    • SSDEEP

      384:AuCvO+MZFryl9SDCP6rXv+mkWsniRq9IPQUkHQIYiSy1pCQqIPxh8E9VF0NykOBw:1+yF+6rX2mk599IPQUO5YiSyv3PxWEun

    Score
    1/10
    behavioral11behavioral12

    • Target

      mail_change/_ssl.pyd

    • Size

      157KB

    • MD5

      208b0108172e59542260934a2e7cfa85

    • SHA1

      1d7ffb1b1754b97448eb41e686c0c79194d2ab3a

    • SHA256

      5160500474ec95d4f3af7e467cc70cb37bec1d12545f0299aab6d69cea106c69

    • SHA512

      41abf6deab0f6c048967ca6060c337067f9f8125529925971be86681ec0d3592c72b9cc85dd8bdee5dd3e4e69e3bb629710d2d641078d5618b4f55b8a60cc69d

    • SSDEEP

      3072:LMaGbIQQbN9W3PiNGeA66l8rBk3xA87xfCA+nbUtFMsVjTNbEzc+pIPC7ODxd:LMaG0bN96oG1l8YA8ZMSR+E

    Score
    1/10
    behavioral13behavioral14

    • Target

      mail_change/_tkinter.pyd

    • Size

      62KB

    • MD5

      758e6e2776585a3ca2e9551edc21edeb

    • SHA1

      8d2268f1c2e6cf0d705bcf615ea17dc9460db25c

    • SHA256

      f2a69b21c5043d567e79f0a2cec4747e1d6f9107f3a4d4e381e41e1c37726c1d

    • SHA512

      827e68deab9357e226c946dc24bb2d36acb232bc7efa4ee8f8bb9343f659e2d89045cf57bd4d8ce4b7694a8d98a6d4a01f1894acb5d0c4daf7d8c9a912b74213

    • SSDEEP

      768:yAh9v6FLQ04EmxQ1NX7TX8sd1T81LGAdU1PhQNxkoBIPOSr5YiSyv5PxWE3v:y+yFLXXB7h81CEA5QNpBIPOSV7SyRPx

    Score
    1/10
    behavioral15behavioral16

    • Target

      mail_change/api-ms-win-core-console-l1-1-0.dll

    • Size

      19KB

    • MD5

      7699c096202da0db6b07fafc914d60ed

    • SHA1

      6e952be34b9457b0cc3e4aa372d941030407a0fc

    • SHA256

      0052515763a1a31d2527a2eb2523fb7b88d8e55c4e4da5ef352b565476bf21e0

    • SHA512

      ae93507cae8d2096c688850d369f8ef282699770b1e27621ed8ebeede1bb285a290f1e2e06a6e9287a05c243b907371977501f1aa4181810913763e0d5bcc2c0

    • SSDEEP

      384:vWEhWQy36q0GftpBjqVsVERHRN75UVplCADZgJq:/0kisKEBq8ADZg4

    Score
    1/10
    behavioral17behavioral18

    • Target

      mail_change/api-ms-win-core-datetime-l1-1-0.dll

    • Size

      18KB

    • MD5

      928be2a3fc2e88bda5ca0808324e97c4

    • SHA1

      b1e1bf73c5dfa99ad69bdc83ec6b6f65cef1c3e2

    • SHA256

      cc6c2fdf1c34fa82036165b111f91220bcf7e43aab79dfb284f982f0590bebb1

    • SHA512

      fc83a74dbd60ada174798d7f40d839f30ef4a288805121ea8d303e39c5fc81188f9ee86131c3df3e2b37edfcca2bfeb3f69aa14e93a0d5d87a6255c6e87c73a7

    • SSDEEP

      384:4WEhWRMoq0GftpBjCtOSbERHRN7qlZwHcC:ufaiEbEBGwB

    Score
    1/10
    behavioral19behavioral20

    • Target

      mail_change/api-ms-win-core-debug-l1-1-0.dll

    • Size

      18KB

    • MD5

      4cb14835b061f42179d5251e744fd667

    • SHA1

      4a1b0b32963a20c479927e4e008bfa9b4168f226

    • SHA256

      f9aaaabf78feb39a1d8e971f5ce047d1c4a896a80409b800f1f7112cdce420ed

    • SHA512

      20c11b2dcf8a928d04cfe6a0130716cc474d48c996025950214d6f9e97bf26b0ec6e2a68f954b0875fc05ca49811bc6e943f91b592fecd14cc8fddd3201841e9

    • SSDEEP

      384:EWEhWbC2Jq0GftpBjDNACiERHRN7lVTdlrltm:SoLifNiEBDl

    Score
    1/10
    behavioral21behavioral22

    • Target

      mail_change/api-ms-win-core-errorhandling-l1-1-0.dll

    • Size

      18KB

    • MD5

      6177998c2ce574a177e524746b77efe7

    • SHA1

      21f262c4826e6edd8534a9196afdfae9ac0e3d51

    • SHA256

      a0aa340274d4bb46b6d9547d647ab7dc16c229577bbab836e6a4f3307f310332

    • SHA512

      af8d6bbacd38b23f48f27bb472beb81ee4ee6200ae54317d282ada104252777b57b056fd5de5ff0463ede1be8b734a8741d80c65a70b37910c13f04d85005117

    • SSDEEP

      384:QvfC5WEhWHy36q0GftpBjTIPaHHCERHRN7sylTIw3R/E/M9:Qi5FkifCEBjR/mC

    Score
    1/10
    behavioral23behavioral24

    • Target

      mail_change/api-ms-win-core-file-l1-1-0.dll

    • Size

      22KB

    • MD5

      33636552339a4a04d75b7c32dbec59d9

    • SHA1

      6457c3941d57bebbc3a737c84377d102b6ece18f

    • SHA256

      05b478718540a6f410a3ad859f7d5e56c223d6786eacc7e9bc80264f587fd0c7

    • SHA512

      b0f9ffed8b8861c9599e5cf0fbc5374e7cd8d170a360a3dfeb37d381dabef941875eaf325666978071d25aa8f49d729684d8be71d12c1b5a8928a7c00156ed03

    • SSDEEP

      384:SBPvVX7WEhWqC2Jq0GftpBjQXERHRN7qulfgOBU/Xwm:yPvVXD3LiaXEBuW2X5

    Score
    1/10
    behavioral25behavioral26

    • Target

      mail_change/api-ms-win-core-file-l1-2-0.dll

    • Size

      18KB

    • MD5

      9d8413744097196f92327f632a85acee

    • SHA1

      dfc07f5e5a0634dd1f15fdc9ff9731748fbff919

    • SHA256

      6878d8168d5cc159efe58f14e5ba10310d99b53ab8495521e54c966994dac50b

    • SHA512

      a8f6e9ee1c5d65f68b8b20d406d3e666c186e15cb3b92575257b5637fe7dd5ac7d75e9ad51c839ba4490512f68f6b48822fc9edd316dd7625d3627d3b975fb2a

    • SSDEEP

      384:8ZWEhW4Moq0GftpBjbFZERHRN7rklkETkA:8ZGaiDZEBLETf

    Score
    1/10
    behavioral27behavioral28

    • Target

      mail_change/api-ms-win-core-file-l2-1-0.dll

    • Size

      18KB

    • MD5

      361c6bcfcea263749419b0fbed7a0ce8

    • SHA1

      03db13108ce9d5fc01cecf3199619ffbccbd855a

    • SHA256

      b74aefd6fa638be3f415165c8109121a2093597421101abc312ee7ffa1130278

    • SHA512

      aa8b585000cc65f9841b938e4523d91d8f6db650e0b4bb11efd740c27309bf81cdb77f05d0beda2489bf26f4fbc6d02c93ce3b64946502e2c044eea89696cc76

    • SSDEEP

      384:oVxWEhWWy36q0GftpBjHAdsERHRN7wUlZwHcv:oVhukiqdsEBwUww

    Score
    1/10
    behavioral29behavioral30

    • Target

      mail_change/api-ms-win-core-handle-l1-1-0.dll

    • Size

      18KB

    • MD5

      c2cd29370b21c0361d7f79d248c05860

    • SHA1

      52efda4ba402c793d4c75e6ce185720ae1432249

    • SHA256

      550b4f5ba95108b01a24f05496576a4e73642334a10dde61b09846e0efb9f260

    • SHA512

      d2165032403277ba10bfbb7861bbe7395a8b0847a669588d3780953d07c1b0ea4461acc49753e8d4978840307b1c50f9e814ab5b62b8e341159e02109bcbab71

    • SSDEEP

      384:fWEhWmy36q0GftpBj4PERHRN7lmlfgOBU/g:POkiuPEBtW2g

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks