Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

BINDInstall.exe

windows7-x64

1

BINDInstall.exe

windows10-2004-x64

1

arpaname.exe

windows7-x64

arpaname.exe

windows10-2004-x64

bindevt.dll

windows7-x64

1

bindevt.dll

windows10-2004-x64

1

ddns-confgen.exe

windows7-x64

ddns-confgen.exe

windows10-2004-x64

dig.exe

windows7-x64

dig.exe

windows10-2004-x64

dnssec-dsfromkey.exe

windows7-x64

dnssec-dsfromkey.exe

windows10-2004-x64

dnssec-key...el.exe

windows7-x64

dnssec-key...el.exe

windows10-2004-x64

dnssec-keygen.exe

windows7-x64

dnssec-keygen.exe

windows10-2004-x64

dnssec-revoke.exe

windows7-x64

dnssec-revoke.exe

windows10-2004-x64

dnssec-settime.exe

windows7-x64

dnssec-settime.exe

windows10-2004-x64

dnssec-signzone.exe

windows7-x64

dnssec-signzone.exe

windows10-2004-x64

genrandom.exe

windows7-x64

genrandom.exe

windows10-2004-x64

host.exe

windows7-x64

host.exe

windows10-2004-x64

isc-hmac-fixup.exe

windows7-x64

isc-hmac-fixup.exe

windows10-2004-x64

libbind9.dll

windows7-x64

1

libbind9.dll

windows10-2004-x64

1

libdns.dll

windows7-x64

1

libdns.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0ea34b077baca105f70d9778579fffe8e6bf356cb98e23da55745e60504c2eec.zip.zip

  • Size

    12.8MB

  • Sample

    231107-r4dm8sbh97

  • MD5

    7bdc6b507e6c339c9398b3ca6a245dfa

  • SHA1

    9c104f28297872bf0c582cd51bb962ad21c849c2

  • SHA256

    68831ac2a806c5fe6af6920e7f880b1e2fd4f1f9592b749629329a1a461bd571

  • SHA512

    0680a1d7f0c78a12bd4560e973d216400d45b10585e28428d72352a2e612109d8d509315a54b9b573eae02f7095295a5dd2277db05e130e46554d5aebe90510c

  • SSDEEP

    393216:UVFxxCmO+bLE/J+BDuVEzaBYZa+kXdAUAd:wFxG+bAYY/iU+CdAUU

Score
3/10

Malware Config

Targets

    • Target

      BINDInstall.exe

    • Size

      2.1MB

    • MD5

      468ff0787bdc498ec4866de8ac213d6c

    • SHA1

      e72ebc29e12b01848ec12dd07e19fa4fef4c5f7f

    • SHA256

      ffccc2ef467a31c39b6988456781fbbf214f219d133fcacc8b039138d8c652de

    • SHA512

      3b82f5922571594d8accc2cb8be49ecd613074bc56cd4a34d67793b5a31ec68d91bbdbb94f6c5208a3fabf84d6378a52ad75614ff81348fe08ac4dacede543cd

    • SSDEEP

      24576:rPrY4zNJTGIib8PeEmT4seLU5pSNX5AmoQnRekxtITfb:rDTnGj8WqLNpzRC

    Score
    1/10
    behavioral1behavioral2

    • Target

      arpaname.exe

    • Size

      40KB

    • MD5

      29d36b7326a41b327e70eb06fa00e18d

    • SHA1

      8084d14802b59742be40984c66cbc199b2ce556f

    • SHA256

      792e437b8f4ca057a38e253140255a0764d687df11bea1632faf5bffb08f1d60

    • SHA512

      4e7f34b12e6411df2a4f4a31dc0380331e438c253b36822c5c37084d28fce621e79db0cae30e41bcf91bc2b810b8791851fffcd62ba47877523ce8b1bb4b22c1

    • SSDEEP

      384:VWsaAWFbuTZOzixPFFmP7NVoC6vxwUbM4FRKs6oP:VWsrakZOz8PF4hVolmUReWP

    Score
    1/10
    behavioral3behavioral4

    • Target

      bindevt.dll

    • Size

      448KB

    • MD5

      424e5df40dd699ceed62abd94a3c4820

    • SHA1

      a0e39d1bfd3eaef9c4bc4d885cdf68eb0e16d5ad

    • SHA256

      b2334e5616a77f6b81a92430a42707b34cd7cdcd2cdf09eac25815bd50aa516b

    • SHA512

      513aa3cc700fb45b450d7106c1a8b030c4032d33b908b58f45b5877a7ac72d537036005815bc0c88f9ea17f16912c20cc63aa8ce9e53c169979f228b05f06532

    • SSDEEP

      6144:ZLyto9KMLecTR/bsUpbm97VQ8873FKBkDORsnb6ZYDZqdHiVXj:ZLKo9PLecFTsU9m9E73FSRsnb6oQIj

    Score
    1/10
    behavioral5behavioral6

    • Target

      ddns-confgen.exe

    • Size

      48KB

    • MD5

      8971888a1edd7fd55f24d3ab237ec79f

    • SHA1

      de4ec25d8885c6d507674064819f8b209324422f

    • SHA256

      ddbd6665200cf77b6ab90ead47e2f879b7a1a576404de30b505dd06be957a4ff

    • SHA512

      a9052ab2083f96b7c62dd199ac154d24550df3205cfe8bbb3e3d1df2eb716408c5385a17c021814c0fb905eeee23e992674f638a03ef5eb044db887590208e8a

    • SSDEEP

      768:/zjQlAbeDzHeozmFLnmfbmAjmU45P4iwP:/8pT+YbFjmU45M

    Score
    1/10
    behavioral7behavioral8

    • Target

      dig.exe

    • Size

      140KB

    • MD5

      afdf2ba1c42000eb30b167f0bdf01be0

    • SHA1

      d2f27d1d81c987fc5a02ec2debe7f7ad4fdc96ea

    • SHA256

      3420228ab4f47035c9eaa8a0fd466447b84556736b077ae9cbb455b5badce50a

    • SHA512

      0cd577876b3dddf4f83f48c630588ae3c26a075ff8fe73e78a34b3684b1cea05ae88022c43eaac8acb4aa18144c0093d7f44f699f71c39454e2953001ce309cc

    • SSDEEP

      3072:VpemPgUXJbEFZAh+9JCKLEvqQklarbxDXpBmUa:+Zj9JCKLEDhxDXn

    Score
    1/10
    behavioral10behavioral9

    • Target

      dnssec-dsfromkey.exe

    • Size

      64KB

    • MD5

      562c007e7195e6977c3cda3b0c71436c

    • SHA1

      2c5ab37fd4dd751914027fc1fe75d951ff53dfd2

    • SHA256

      497eb87dfc9ab61398d969cb7cbeeb311f50ab11d59ef48c79e6536e3df20197

    • SHA512

      096dda65eb5dd0f6feb226cfbc747dfbe81ff0c3ee8b094454fe9f19bafba8acefa9245a50460c8a319c0313107b3c3a914c734a48f3097485b03fe00e7046d9

    • SSDEEP

      768:K84kb11moBx3cYrP9zKRNkr5y8vhmUss8OwP:HZ1m0x3noRNkrg8vhmUszf

    Score
    1/10
    behavioral11behavioral12

    • Target

      dnssec-keyfromlabel.exe

    • Size

      64KB

    • MD5

      b205b7481e7a5e9a4896e2144ff060fd

    • SHA1

      9076e8fb7f0844e2e23b6b827d9c47be917f53eb

    • SHA256

      f93baf4b0d039dd9d3a3507e0775bd47ba7991a267141c478a03d11a16a13735

    • SHA512

      7417dbe5ce027f1ed8f2eb658c895d1c98f7cb62635b607a6d892fa252703468a778e04436676100925704a28435043068fea9dfce0cfd53ab93f104b5032075

    • SSDEEP

      768:c5aibD3jkFvjbCdwhMnVMtUSfazvpOsj12J5ymUvhzxjwP:ebDkjHhMngqpOw1HmUvh+

    Score
    1/10
    behavioral13behavioral14

    • Target

      dnssec-keygen.exe

    • Size

      80KB

    • MD5

      dca1497c55c09d5da1927cb466857b43

    • SHA1

      70a944815fc53f425fe98b12f6f40102c20dd4fe

    • SHA256

      ecde9f5b17d0d37bf857cc747657d4b7eaa63e606b71525a143305071c3be45d

    • SHA512

      ad2d30b1fb75a1d6acac3ffc2e93352881b2906dd09803b5ba125cc3bccefbd1c65723f6a6ae6a9c523a1ceb5429e090315648d3164573ffa7f99d62dc5cbc63

    • SSDEEP

      1536:i3rCiliexaVtk2/1EJZ3KWgsXbQmUytKRK8:i3rCoTaY2SJZ3KWgsXbQmUytKRK

    Score
    1/10
    behavioral15behavioral16

    • Target

      dnssec-revoke.exe

    • Size

      60KB

    • MD5

      341178354c111a202b80f51615bc0986

    • SHA1

      fb696fbfbc0d3e2b7dc5f16ebb3f548a87e4cf81

    • SHA256

      a634da96cf6fb6449456508b5ee859ae7b082191fa5ba64c54668ca9e1fa88cf

    • SHA512

      5efa4af9d11334ac0fa9250eac6932b003e924d06203734b2cc280fb99dd9bfaf5ea71d552f2b66539fe474f1c31f44173165c35d05db6326dbf246ea19c825b

    • SSDEEP

      384:At4vU6tFM+kLdEzryBIiJ2Thz7dWhzqStE2uBc2RgE6vxwU5ji6Ybsy6oP:K4vfKUrBzTh1szlnmBRMmUwMwP

    Score
    1/10
    behavioral17behavioral18

    • Target

      dnssec-settime.exe

    • Size

      64KB

    • MD5

      8b1c4a78f845fec73331891bf8f60c2c

    • SHA1

      4a0fc106d125d58f5914474437db55a38ef245b9

    • SHA256

      1f482e072529b0556d95ce68000bfbc4e0912f88f978ecc137d144d13c33a261

    • SHA512

      42714535d854edc659ab9106bffddd5f60ea10f07ed41bf012c9480f3f63db824e28b0532135542df63cba5525d53f4afe37827581065d6b0472e517a365b6be

    • SSDEEP

      768:FOtauksm4frdkPGkuodRYkYz4iSQC74WKeFmU4WtowP:FOtaqUGk7PvLiSQCfKamU4u

    Score
    1/10
    behavioral19behavioral20

    • Target

      dnssec-signzone.exe

    • Size

      136KB

    • MD5

      0f41f99a66a6a416be6c3b8270514233

    • SHA1

      c98efa99b0e80b0daa22671f50e506dafa0874e9

    • SHA256

      0b80060a20cf06576b01abd74d8a7f8a6215c0a15a95ad87a592c9db74f790d5

    • SHA512

      598805fc03f4a0f8d1b172b52d6cf4c09d6a40368588e6982b5bac6d910f8f3b150254b9ba004ccf6afc5e1c058a0597bf8764156e7a15027b3b2c28e1b63473

    • SSDEEP

      1536:wteyzr/magvl6AckcBzXK4bjrmoNW6NO8rcgyrLfC3HpFKs24GAYGUNL:+/+kXaa5RYFy3HpFKs24GAYGUN

    Score
    1/10
    behavioral21behavioral22

    • Target

      genrandom.exe

    • Size

      40KB

    • MD5

      f09d9e9f89c0c339f7ca89c88c7033ac

    • SHA1

      3c44510a433c9564d465d23cd3dda32a99f57cec

    • SHA256

      4e12ea752fb71fe7d096463c9d8bc7d1f96a2493a867f2e15b62041d26925370

    • SHA512

      e092ea04029e0dc01a6ca68cdad48c12e8a11ed36598d23c91978f08b91e6a054ba9e9bff7f860f341e4b00c0b3bfc2a2a0663e1f00542eb09ad38252c09b466

    • SSDEEP

      384:lSuHRskrQsshHg04zuDByenQbywAdPxwUbg5yAeK6dP:lj2BhHgfzmB5nwAdGUQSNP

    Score
    1/10
    behavioral23behavioral24

    • Target

      host.exe

    • Size

      120KB

    • MD5

      2e03203ea5906043ae8c8471ce308353

    • SHA1

      d61ed598d6fa0e0eb8cc78c7f372457beff3fc6e

    • SHA256

      6a4920efdae2970269587b90f2cb39405db072f49e8233143466b1110c1b1239

    • SHA512

      c28ea1a7a5cc4e2239defa97ce7f67d397036878d10622e9e5cee8f2be706d5f9d967279ab5bea8399354d123d2fde5d0196e792ac133182c554a92c14f64b94

    • SSDEEP

      3072:9vPQC9ZluhkfKbAwU7P+CFZbxD32eGUjM:R7YkfGAwU7VvD3lq

    Score
    1/10
    behavioral25behavioral26

    • Target

      isc-hmac-fixup.exe

    • Size

      40KB

    • MD5

      21a5e2ac8e40866280220270614f8f00

    • SHA1

      90898201dbd48f32e10a4f168718492d9ad4fe7e

    • SHA256

      85793b4eb30a8f0ec1aa19c89209213091c35dd42cf613331604980582dd1652

    • SHA512

      9df91ac658e04da9d9fbbf78dd9d87179354d19d0c5e7768f38d60587a7997c07fe6cbf8c2cd29cc8bf0711ee74a88afd08baf06709474f4822b25e59217c4f9

    • SSDEEP

      384:uZQ/KHVjJzr8AHfWjBui6vxwUbTqGzRus6oP:u0kVjJzfucmUiGoWP

    Score
    1/10
    behavioral27behavioral28

    • Target

      libbind9.dll

    • Size

      92KB

    • MD5

      2b17d36d45728c5e00c207f9c3c77cd0

    • SHA1

      b24f63e20ea4c18d56748cd9f8fdd9f08625329b

    • SHA256

      b9e6eda2e1995c633868c8806d74a0a052402ad92f4667098b9ea1ad63d269e5

    • SHA512

      2178a3ee48b67d09923c10120ffe3f8a8414c5bf635738f6f1f655a271bab85ec632e3c2867dfc670101404c9add998d128e706ccd12748013cff97a97c0f8b6

    • SSDEEP

      1536:Yl9bU0yVz4t4up34bOG+pZczs2iIeBlzzYmUSvWPrP3:YPbUXqtxp34bORpG/eBymUSvez3

    Score
    1/10
    behavioral29behavioral30

    • Target

      libdns.dll

    • Size

      2.4MB

    • MD5

      8779374c65c3b5c06016f69559bf2274

    • SHA1

      f4b265bb2789f1c6a1f8c32a02d4decebbc71924

    • SHA256

      ecbdaef42257a1528becb0f2fb230daf3fb8111a3e43879bd4cac26fe94db5d6

    • SHA512

      9a889fd46968c4580c9e781bd2347edb2e3c96af91edd4de6fe7a925beb2c95db9e410ee7271c4b67ad3abbfda98618a54ee9c1c4bc359ba219cb9b63117a931

    • SSDEEP

      24576:vU7+EH/toCSTP9J2iq60soeoBwQTUlqHSScJmBCS+hkBPsWdhtgDhvzfsP+tqOvU:aST2inoKReBHQhvzfsP+tqlaqmBw

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks