Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

Liesmich.vbs

windows7-x64

1

Liesmich.vbs

windows10-2004-x64

1

OpenSysLib...g0.dll

windows7-x64

1

OpenSysLib...g0.dll

windows10-2004-x64

1

OpenSysLib...g0.sys

windows7-x64

1

OpenSysLib...g0.sys

windows10-2004-x64

1

OpenSysLib...64.dll

windows7-x64

1

OpenSysLib...64.dll

windows10-2004-x64

1

OpenSysLib...64.sys

windows7-x64

1

OpenSysLib...64.sys

windows10-2004-x64

1

mmgen/make.bat

windows7-x64

1

mmgen/make.bat

windows10-2004-x64

1

mmgen/mmgen.vbs

windows7-x64

1

mmgen/mmgen.vbs

windows10-2004-x64

1

mmtest/WinRing0.dll

windows7-x64

1

mmtest/WinRing0.dll

windows10-2004-x64

1

mmtest/WinRing0.sys

windows7-x64

1

mmtest/WinRing0.sys

windows10-2004-x64

1

mmtest/Win...64.dll

windows7-x64

1

mmtest/Win...64.dll

windows10-2004-x64

1

mmtest/Win...64.sys

windows7-x64

1

mmtest/Win...64.sys

windows10-2004-x64

1

mmtest/mmtest.vbs

windows7-x64

1

mmtest/mmtest.vbs

windows10-2004-x64

1

x64/WinRing0.dll

windows7-x64

1

x64/WinRing0.dll

windows10-2004-x64

1

x64/WinRing0.sys

windows7-x64

1

x64/WinRing0.sys

windows10-2004-x64

1

x64/WinRing0x64.dll

windows7-x64

1

x64/WinRing0x64.dll

windows10-2004-x64

1

x64/WinRing0x64.sys

windows7-x64

1

x64/WinRing0x64.sys

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a62c64f62aa4df71c1316760614f046aacc55264623c1114ab7d7fc81b527f7e.zip.zip

  • Size

    10.7MB

  • Sample

    231107-r1hg1sbf45

  • MD5

    f11e2ea74785062c28373e85e0a4fe60

  • SHA1

    d1ba9ffff0140e21573b8393d86eab4f6086d18d

  • SHA256

    5f7d2e199b92158b5e54fc23cb25f489d64ba2770fe0709e522a5d0109425018

  • SHA512

    b2b2c92e36cada4710806348f71e520ea74959d79569ff92af87cfd01fa346af2695124ffe7cf168ba125656ad57de9cc8db343b98ff15ca4a38d47e1a5d61a7

  • SSDEEP

    196608:llpqwXPhzfigz2eh+9NFWSCSh9QtNJqm5FnkddM/ELIAtGo605:liwXZegz1hC9jQtWUkfMwGI

Score
3/10

Malware Config

Targets

    • Target

      Liesmich.txt

    • Size

      7KB

    • MD5

      555b4a4242eefa68cec49e67d06ffa3c

    • SHA1

      ad4b6a5a34d4089dbf207d4f126621f5f3029482

    • SHA256

      fd37887d9fbd48569185eb6d2f7ece5cef8f4ad572fbfde9f9f43af584a8812d

    • SHA512

      5380047a4bb1bdfe99698ac8bb769d798096499bfa7c4e21a2d0854adc20c8913bba58a5fe2266b3f665299e7733a36164613118d62cb96cf878494c73792f3c

    • SSDEEP

      192:yyklTbHwStvpaKmiQ8G4BLVw4Bw6QQqZQpp7PmE0Z0Z0SpJS0w0w0ScbpLj:yySTbHZRatelBJ9ytLZ6FuEJnVj

    Score
    1/10
    behavioral1behavioral2

    • Target

      OpenSysLib/WinRing0.dll

    • Size

      64KB

    • MD5

      6fc52a8c0cccd5f9b1cdb3de99cb3d3c

    • SHA1

      f15af33a43d6af621159ec0d74a7a7b09cb28a73

    • SHA256

      2a2a466fbe05c6293c442429bad45b223f5742eb0ae254204bdfbaeee24c84d8

    • SHA512

      8b56ffec3d1e7455f09a09c441c002018649310d107080fb8cc3f74d67c893712e1edbc01c14f9a53d230994e499a2434d43449e888493e0daa858359ee1b2ed

    • SSDEEP

      768:gRP1qwVjsRDoomqfLYowvIay/scqQOTtCPzVMei:UP1Q0oQway/Cntezk

    Score
    1/10
    behavioral3behavioral4

    • Target

      OpenSysLib/WinRing0.sys

    • Size

      14KB

    • MD5

      845af1ba23c8d5e64def61bcc441604c

    • SHA1

      8ac34eb21b9b38f67cd29684c45696c20ab2e75a

    • SHA256

      206ee7a7c3f4d9496f742ccb84718f556ecb4ba2a95fe7e0cdf3a003ffbe4597

    • SHA512

      0c2d625bbe5b1902cd371f4e1a3dceee6401aa9fa0b25f4720277eaaac3576c2029d7db3ae9983382e4ca8f0415ccd4b0e6c1eea864e7886276f93047258475f

    • SSDEEP

      384:zkg+wW5QDV08teHn+EgTWGYOf2OJ06dUb+m:JDV4+ECtfSJim

    Score
    1/10
    behavioral5behavioral6

    • Target

      OpenSysLib/WinRing0x64.dll

    • Size

      56KB

    • MD5

      b197b687ebdba80f965335483d178efc

    • SHA1

      e6dd89bd8e29c66be84b00154998046fff3ffa00

    • SHA256

      dee350ebaa93f8c0510d61dbe95a3e33ea68c49058c7120e1fea5d987f9921dc

    • SHA512

      718bb7b14a5dd9981226cba24966fb92061643c42c241096732dc6354b24619f17160a1a8aba35d04b5934079c7637f8479b3f4def76245443f230ab32b622c6

    • SSDEEP

      1536:PabN1P2LlFWUgxhL3CKwfEQuTrbrjbKE:Pabr+LlFWBx1wfHuTrvjGE

    Score
    1/10
    behavioral7behavioral8

    • Target

      OpenSysLib/WinRing0x64.sys

    • Size

      14KB

    • MD5

      0c0195c48b6b8582fa6f6373032118da

    • SHA1

      d25340ae8e92a6d29f599fef426a2bc1b5217299

    • SHA256

      11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5

    • SHA512

      ab28e99659f219fec553155a0810de90f0c5b07dc9b66bda86d7686499fb0ec5fddeb7cd7a3c5b77dccb5e865f2715c2d81f4d40df4431c92ac7860c7e01720d

    • SSDEEP

      192:nqjKhp+GQvzj3i+5T9oGYJh1wAoxhSF6OOoe068jSJUbueq1H2PIP0:qjKL+v/y+5TWGYOf2OJ06dUb+pQ

    Score
    1/10
    behavioral10behavioral9

    • Target

      mmgen/make.bat

    • Size

      6KB

    • MD5

      870afa4621103558cf2e2b66582a1e0a

    • SHA1

      22cd23287b09b65bfe3f36d693f9b841bc8dfa49

    • SHA256

      956767ed414a1891ca22a4ba7ebf141f92801f0ae51859151e515746ae032929

    • SHA512

      07d10996cb839e48ad6337fe3e766f7937161d70e3e1ddaa21ca34af955af5be7e4be446bda7da23cc34a0ff2d07c969aa903baf1eda2cd5458cf8bfe647fcbb

    • SSDEEP

      48:C/9z2ST0lRlHmEDFJUIIIpqqzFazPJOlLqfHOQLuKkZOusorQ5qT6vt/jMpQotXK:CFtTWlHmbNeZa9zkObxs2ff8HW

    Score
    1/10
    behavioral11behavioral12

    • Target

      mmgen/mmgen.cpp

    • Size

      6KB

    • MD5

      2568fe176ca83ff8854ee84cad2c9c35

    • SHA1

      b7cf3a36d656527e1604f94b9baaa85303573981

    • SHA256

      98c5add82e27351bb2166206566b21f980d3599ebb23aefec9405c2077a3c66e

    • SHA512

      177c01813dd28836fb1f9abab45aa5e6b5a82da9b30ccd1e9704b39e5a01aff74abb3fc9691f4c9bdb12064ba842be384f680343e177fca8d134eb13395492b4

    • SSDEEP

      96:BAfrK6+fTsHrEJQHWMy6vOHVjAXr7EqbKlujrRjSiLSGqT:efr27sL+llAXruQj9jFC

    Score
    1/10
    behavioral13behavioral14

    • Target

      mmtest/WinRing0.dll

    • Size

      64KB

    • MD5

      6fc52a8c0cccd5f9b1cdb3de99cb3d3c

    • SHA1

      f15af33a43d6af621159ec0d74a7a7b09cb28a73

    • SHA256

      2a2a466fbe05c6293c442429bad45b223f5742eb0ae254204bdfbaeee24c84d8

    • SHA512

      8b56ffec3d1e7455f09a09c441c002018649310d107080fb8cc3f74d67c893712e1edbc01c14f9a53d230994e499a2434d43449e888493e0daa858359ee1b2ed

    • SSDEEP

      768:gRP1qwVjsRDoomqfLYowvIay/scqQOTtCPzVMei:UP1Q0oQway/Cntezk

    Score
    1/10
    behavioral15behavioral16

    • Target

      mmtest/WinRing0.sys

    • Size

      14KB

    • MD5

      845af1ba23c8d5e64def61bcc441604c

    • SHA1

      8ac34eb21b9b38f67cd29684c45696c20ab2e75a

    • SHA256

      206ee7a7c3f4d9496f742ccb84718f556ecb4ba2a95fe7e0cdf3a003ffbe4597

    • SHA512

      0c2d625bbe5b1902cd371f4e1a3dceee6401aa9fa0b25f4720277eaaac3576c2029d7db3ae9983382e4ca8f0415ccd4b0e6c1eea864e7886276f93047258475f

    • SSDEEP

      384:zkg+wW5QDV08teHn+EgTWGYOf2OJ06dUb+m:JDV4+ECtfSJim

    Score
    1/10
    behavioral17behavioral18

    • Target

      mmtest/WinRing0x64.dll

    • Size

      56KB

    • MD5

      b197b687ebdba80f965335483d178efc

    • SHA1

      e6dd89bd8e29c66be84b00154998046fff3ffa00

    • SHA256

      dee350ebaa93f8c0510d61dbe95a3e33ea68c49058c7120e1fea5d987f9921dc

    • SHA512

      718bb7b14a5dd9981226cba24966fb92061643c42c241096732dc6354b24619f17160a1a8aba35d04b5934079c7637f8479b3f4def76245443f230ab32b622c6

    • SSDEEP

      1536:PabN1P2LlFWUgxhL3CKwfEQuTrbrjbKE:Pabr+LlFWBx1wfHuTrvjGE

    Score
    1/10
    behavioral19behavioral20

    • Target

      mmtest/WinRing0x64.sys

    • Size

      14KB

    • MD5

      0c0195c48b6b8582fa6f6373032118da

    • SHA1

      d25340ae8e92a6d29f599fef426a2bc1b5217299

    • SHA256

      11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5

    • SHA512

      ab28e99659f219fec553155a0810de90f0c5b07dc9b66bda86d7686499fb0ec5fddeb7cd7a3c5b77dccb5e865f2715c2d81f4d40df4431c92ac7860c7e01720d

    • SSDEEP

      192:nqjKhp+GQvzj3i+5T9oGYJh1wAoxhSF6OOoe068jSJUbueq1H2PIP0:qjKL+v/y+5TWGYOf2OJ06dUb+pQ

    Score
    1/10
    behavioral21behavioral22

    • Target

      mmtest/mmtest.cpp

    • Size

      38KB

    • MD5

      ad367c63b0731be89dfe7b0f2eaa7133

    • SHA1

      d8edf556796cc3d4dbf2cf63c5c51a7c207daf8b

    • SHA256

      d67c5ddbf07fcd1068ee1df4e349d4429a4ef7d04786e07b7559116162a26ce2

    • SHA512

      5a005cabdb0df6d92b40b995b69ef500606585fdbfbcad2e9d5105816d17d02b8302111e41bb528437ffe8a21da5245e7dd3b9680f9b2ce739cddaddd3c6edc6

    • SSDEEP

      384:gq0LVPPSrtzQSWg8jSjhhaiiiygSTamaKevvPvvysfXSVOVti98l0MYMAHuQVAZ:gq0LVPPOzQWglQ

    Score
    1/10
    behavioral23behavioral24

    • Target

      x64/WinRing0.dll

    • Size

      64KB

    • MD5

      6fc52a8c0cccd5f9b1cdb3de99cb3d3c

    • SHA1

      f15af33a43d6af621159ec0d74a7a7b09cb28a73

    • SHA256

      2a2a466fbe05c6293c442429bad45b223f5742eb0ae254204bdfbaeee24c84d8

    • SHA512

      8b56ffec3d1e7455f09a09c441c002018649310d107080fb8cc3f74d67c893712e1edbc01c14f9a53d230994e499a2434d43449e888493e0daa858359ee1b2ed

    • SSDEEP

      768:gRP1qwVjsRDoomqfLYowvIay/scqQOTtCPzVMei:UP1Q0oQway/Cntezk

    Score
    1/10
    behavioral25behavioral26

    • Target

      x64/WinRing0.sys

    • Size

      14KB

    • MD5

      845af1ba23c8d5e64def61bcc441604c

    • SHA1

      8ac34eb21b9b38f67cd29684c45696c20ab2e75a

    • SHA256

      206ee7a7c3f4d9496f742ccb84718f556ecb4ba2a95fe7e0cdf3a003ffbe4597

    • SHA512

      0c2d625bbe5b1902cd371f4e1a3dceee6401aa9fa0b25f4720277eaaac3576c2029d7db3ae9983382e4ca8f0415ccd4b0e6c1eea864e7886276f93047258475f

    • SSDEEP

      384:zkg+wW5QDV08teHn+EgTWGYOf2OJ06dUb+m:JDV4+ECtfSJim

    Score
    1/10
    behavioral27behavioral28

    • Target

      x64/WinRing0x64.dll

    • Size

      56KB

    • MD5

      b197b687ebdba80f965335483d178efc

    • SHA1

      e6dd89bd8e29c66be84b00154998046fff3ffa00

    • SHA256

      dee350ebaa93f8c0510d61dbe95a3e33ea68c49058c7120e1fea5d987f9921dc

    • SHA512

      718bb7b14a5dd9981226cba24966fb92061643c42c241096732dc6354b24619f17160a1a8aba35d04b5934079c7637f8479b3f4def76245443f230ab32b622c6

    • SSDEEP

      1536:PabN1P2LlFWUgxhL3CKwfEQuTrbrjbKE:Pabr+LlFWBx1wfHuTrvjGE

    Score
    1/10
    behavioral29behavioral30

    • Target

      x64/WinRing0x64.sys

    • Size

      14KB

    • MD5

      0c0195c48b6b8582fa6f6373032118da

    • SHA1

      d25340ae8e92a6d29f599fef426a2bc1b5217299

    • SHA256

      11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5

    • SHA512

      ab28e99659f219fec553155a0810de90f0c5b07dc9b66bda86d7686499fb0ec5fddeb7cd7a3c5b77dccb5e865f2715c2d81f4d40df4431c92ac7860c7e01720d

    • SSDEEP

      192:nqjKhp+GQvzj3i+5T9oGYJh1wAoxhSF6OOoe068jSJUbueq1H2PIP0:qjKL+v/y+5TWGYOf2OJ06dUb+pQ

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks