Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a11c7858c4dd9addfd9adeded7d802933f15789daf0c6186c4939b76f74566b5.zip.zip

  • Size

    10.5MB

  • Sample

    231107-rcp7yshe85

  • MD5

    7b030655862e4e583818fbd3530119c5

  • SHA1

    5d4294e9b1a8857919baf597a44afabdde9bea69

  • SHA256

    3a988e442285b36fb8b471da5ff81bd5d1ef2971fc2f991018bf1d51c98e9a20

  • SHA512

    623b08aeb7708e859eae63671c0bec81aa6bfe6856ee19a9631d4c9093d23e9eb12721f6e154cd499e33a0f07cec5cf6afad027f6b9fa7302476d11fa3d55f01

  • SSDEEP

    196608:RIbMEUFsZmwna6qylDyYkA42HfB8/ihahzSHJwa4E0xz5ru3IOgWI6bmy9fzWStR:6gtsZLacGU4oB8/iU9SHJzT0N5rhW9ye

Score
3/10

Malware Config

Targets

    • Target

      BINDInstall.exe

    • Size

      2.1MB

    • MD5

      0bd01b2d3743112b92652c815f48d29c

    • SHA1

      33e1972dd662e61991e3ba9c5b45d1a97f323721

    • SHA256

      f902b45bb1b12722198eb799f7b38fadb45aa9de2730080f22bd52a4e49380f4

    • SHA512

      927600c978b5909b1a9258029359f61c6fba38830b0201de897afb0355bb53c638e4bcea30b2d1bac24b0d3ecb6dbf92546d065f18d82ae9eed44c308a42dfc4

    • SSDEEP

      24576:qF18slVZ7krWXEWaU1+HigLy6eUKn7d/bky35iso063UGUt:w1fqepjfz5CE

    Score
    1/10
    • Target

      bindevt.dll

    • Size

      444KB

    • MD5

      cde073c2a57eb1e8061768867040b11c

    • SHA1

      a1ec7f57dad70709f8283b8aae9570e5d811dc7c

    • SHA256

      5db6783d02dbff36267d02661c9dcfc579e98f98bb8a85cd188d6af0dd105b85

    • SHA512

      875f5b5ed0512e4516dd14241b6031b79b4b304f09480cd1e8046fd439f6e510cfd8efd45c592854ddfb23e161dff8b06d2087ea0d20304e67f20f6019d1d30a

    • SSDEEP

      6144:U7cfZ23n+eb6n/ylxK4ANV0ulNnWz5fx+mDiM9yl1OBaF6:U7OZ23+eW/ylxKyulNMx+mDiH/qH

    Score
    1/10
    • Target

      dig.exe

    • Size

      132KB

    • MD5

      ec72cda3eb2d6dfccda5b1f24daa83f1

    • SHA1

      fa6459183ad1ad7f33be82dc50981c8d03f4e91b

    • SHA256

      b34d04502833561f7b79eaef04608f22cfdba17bd53367fa00bcc2697eaae847

    • SHA512

      0b735be2fc83ae64799d09488bc21e70c8f8a484cfc0963a9c23ea1d036f0b8104e3cd9cd2f645625793794187051a7e5e5c8c9a2c713cc5b8d4c33f3504a63b

    • SSDEEP

      3072:j8KW4chs2xiP1ftS1QZSLvX0nxDoOmUw:oJKJU1QM8DoO

    Score
    1/10
    • Target

      dnssec-keygen.exe

    • Size

      60KB

    • MD5

      76adaf357e48e6827d6dbf16b7fe271c

    • SHA1

      6e1ff3643e00b2868f433250f30edad72c319ca4

    • SHA256

      e57327a3d1418037169730e066fd413f71c1afaa3b9435abb3b7a89f6edf77d1

    • SHA512

      bc07f17cee532cbf6269f666efbe4d110e712076a149c863026570dd14e176e605b41267e07c32d29334eab19b45d5ca19972572b4b31fbc695f1cf6b756ef7f

    • SSDEEP

      384:a5OKRBzgQC4in/qB2KAv6F8xjoCn6J3OD0zXXKyWWXt2tm6vxwU58YbPxIZy6oP:6BRBzg74iCIi5y0zqJtmUBgwP

    Score
    1/10
    • Target

      dnssec-signzone.exe

    • Size

      92KB

    • MD5

      3d55d79523d7238068e4e04f8356ecf9

    • SHA1

      ea3e7d3125baaae1ef293c8964d0e59291df9ed1

    • SHA256

      d29588734b786fbab7306fa2bcecea9ccce1e70bd19f8bea45b07dc748043c5b

    • SHA512

      4de7c60117ad3b60f653820479b888bd90eff0199e0042af641d7862e5a8296edb0c7477f16fc542334389b2d9a1cf39ffbc7831ff6f85fcf8be441899090519

    • SSDEEP

      1536:a2DM06adCJ/+1IDWVP0FrNFqY3hqGUirY0:EHao9QCtNFqY3hqGUiE

    Score
    1/10
    • Target

      host.exe

    • Size

      116KB

    • MD5

      5c7688216b3be5cb7864ac1cb9b6457d

    • SHA1

      95657bc159b90c81114565ec50affa32e0f2e28f

    • SHA256

      c370ac9a953d866b15017bb099ba6beef10de808c4cb9ccbc1bc60b622fa2b29

    • SHA512

      1b30bc0ddbe6c72a1dc60941deebf885394b793c0f7c3cfa73b899cf5100f2522f19278d8f38b98b61329a0768770cc2954d2b4820ed041d854d8387bec25726

    • SSDEEP

      1536:ozJ+qoIp+V7ngXBllj2EyJBEjkXvT9ensnxDoHGU5nIfjO:oEqo6hXBLjyJBEjovTInsnxDoHGU5If

    Score
    1/10
    • Target

      libbind9.dll

    • Size

      68KB

    • MD5

      6d1e4c831891b2b970245ce6f5a4f993

    • SHA1

      36e7fa68cce591cd5dbde32f85c66e7df5fbc07c

    • SHA256

      c3d3fb6da4ea73399cbe4f1e879062d2ce3173b5338f58d53f61052f1eae4d17

    • SHA512

      86547253208043218fe749713c41ca3ea91269579bf1e0a70708ca48ef56255eaa99fd2fa708a07c4202ea587861497bb54bd3e48eccaa1a67dd65e903f19fee

    • SSDEEP

      768:W+ATAE6V6z+CzCJaGUy/T9L4zHE1gpmU3ujP5B:cTAEFzd6F76E1GmU3ujv

    Score
    1/10
    • Target

      libdns.dll

    • Size

      1.7MB

    • MD5

      d33ff4828ff1d2ee9cd819713913588a

    • SHA1

      972e1c68a1e1d277e9c65ebde3ea105ff0539349

    • SHA256

      069fc5a23bd78faf6cd70f4d8cca0961b1ab5865cb70cfc657f4d8c643bff5d5

    • SHA512

      61df5d89d8d9637fdf2be3e36957af34dc0025cd8bc75219cd0720e239ba936894505b677543d0adff5e35dbeb0254d55be334364862a85d5445443bce2f0431

    • SSDEEP

      24576:96czLcFZcUIqdheg32EApSap97XqTc9pIhNzGsPnqSanJ21JkvcY:qHleg3I1qT4mhNzGsPQJ21WD

    Score
    1/10
    • Target

      libeay32.dll

    • Size

      1004KB

    • MD5

      d8368ab26ee2bfd5aa6079841c2700ef

    • SHA1

      8834497087ac3d3ce5a0f03c339020da584a4d3e

    • SHA256

      e4cd824aaf7214d5f2cc48faeefa76c8ca7c15a3626dd088e2576b73100cb449

    • SHA512

      c19e9474f6ee2256a7850420505fd2ff47322407c37754562939c3b636d63edc3b879394c385bf32d7f4d6170a0b1ad5daa5a6b0c7dceec5c5d4279be89da814

    • SSDEEP

      12288:BMBssC/1yQWW+Jtuo0DzMfLyegdO9gE920sx2B5YC33pfg5uWJlT0/2:BMBclWWsQDzay0jhO6YSp45uWzQ/2

    Score
    1/10
    • Target

      libisc.dll

    • Size

      396KB

    • MD5

      5458f911ef465b5961596344d55263c1

    • SHA1

      a8b07e052e29e2721cd8d2a85ae3bca452c3de2e

    • SHA256

      9f3ef692b83d5ce4896314378f58a20c5daf00279371185a79d08faa0d724934

    • SHA512

      d9a65f0f1002021597c178eef0d918e4cc1127dc99218edef3f03d63088874383f23286fbcfb659d646565f217ba2ca5285ef036311eeca28a5d81d957b9de53

    • SSDEEP

      6144:gG+v8ry0sckp45VqAwUE7rTb+6W43Z7RoOWq0aEvNguFHFHfyi:DXryXMgAwUE7rTb+6W43Z7+qBEFjHp

    Score
    1/10
    • Target

      libisccc.dll

    • Size

      72KB

    • MD5

      98f825def01ab479aa61f34e4e883f15

    • SHA1

      47a85ae61ce730b366a95c00bb29f1955219680e

    • SHA256

      8dcd1e7eaae7f3d2d47702e8a353ba138cf1d9cc2a254a5f9b8558f35937be19

    • SHA512

      f67d3bc7f7a1da3a8eae47f19eee86ce455c5b757093e3a8f8e265726244e657cba6bef714ef898634381c5eadf6cd2ab3079f14cb07f5f1235e25eaf873874f

    • SSDEEP

      1536:mBLEwmv/lkijf2TH9IDZlM2ypiflDfD4PONF3/ujUX+RmUmRFj:R1HlNjf2TH9CZlM2ypifFfD44F3/ujUp

    Score
    1/10
    • Target

      libisccfg.dll

    • Size

      108KB

    • MD5

      122f406a8f415ea977b6291ce1f6c6d0

    • SHA1

      ffa154a544639579c61ab19885320cf8042fbbf2

    • SHA256

      7c01b51c944b6142aff086bf21b7ee152836605d26dd977111142a9b43b6ffd5

    • SHA512

      4331b10b3c5d0688d6d3ad818c482727284bb8317c5ad59edf031b6c62b1efa2b766717ac039d6152b522707a48360771dcb88c305103e49f9b2185bd1123e8c

    • SSDEEP

      768:VC1w2/mpdeUXzrXbeC41YDVw5kFtuCumEcDKBz+gpK5Jc7GU15x6rLjPYsgx:Vqnepow41MyMtrbgpK54GU1eLjAsgx

    Score
    1/10
    • Target

      liblwres.dll

    • Size

      124KB

    • MD5

      18838ba02c48c141c41daa704129cb1a

    • SHA1

      9399fff264599d6e405fc02dfabcdb45c8ed177f

    • SHA256

      c9cf5ca6b6ed436753778d3535837d3ffa9619c64a60f5e6df3f535f79dd9d47

    • SHA512

      5c1206d27e23e5fb73af1958d434ebbcca1ef9d50328f5b864f4a86e699ca1c73720791c58b55c978d6aadc4795e7fcfef4d0e7e7342f92799d3a901eb29ccc7

    • SSDEEP

      3072:uYWmNGkKy+6GLA+DrmnPsNex2kk87DjXiAS2QAa56GUtVZU:nPDKy+6GLA+D01t

    Score
    1/10
    • Target

      named-checkconf.exe

    • Size

      52KB

    • MD5

      3937d4be1804f5fdc70b7fc0c3778174

    • SHA1

      85eea0b1268de092363218bbe7a781b3c3eec472

    • SHA256

      5089fb7f7619136252d6047b77b99cb4f08747ff5f52bc074202b873012d58d7

    • SHA512

      5cc65adac6352bebe2302b5f2b1233e148b324806892694488a79f72649f3832fd98baa326700308b94b192dae7008bb6c797f37a5b3ea49c72e529cfec1d0a6

    • SSDEEP

      384:yI5dZln4Uh/qh5AYQTMTBlU2eUTjlzNdX3COG1SFcPxwUb69CARK6EP:y8lvChNzTcPUvlzvX3ptiGUmCmUP

    Score
    1/10
    • Target

      named-checkzone.exe

    • Size

      44KB

    • MD5

      b3ed57dc3a68fbe62df2b149323dd117

    • SHA1

      704c259a56218f2f0300da0a50bd02d6dca60320

    • SHA256

      352ab58f29a10ea8c36fc6ef6c610e1bdbb364a3ebf10b2da15f4621869d0085

    • SHA512

      2d1225ccd86b20594e5af6f2640586a64a93ffa89cfc855641e4715c844bb2824bc7809433e5d4355f6860bca3717f752c34038a4fdafdfe6ccf2c400fe5faad

    • SSDEEP

      384:3+DDcBcTi5GSFyKHKYA/+Miuzx173hVOpsxKJUPxwUbfg9VVyVoMtK6EP:McBcTU+92MVzX3OpaGUMLYKWUP

    Score
    1/10
    • Target

      named.exe

    • Size

      436KB

    • MD5

      548bf850c7dae70d9d6c15aa38130fa3

    • SHA1

      073be4ce456e009501f7a886f8022cf78beb7c61

    • SHA256

      7f0e030044ae89cba464d57448213ad5eec995aca823ed9906e9082cede76d8f

    • SHA512

      bde57a335c810b167c6e0b08e5d32944b0f6e07bb549163e5eb431ca63cd55d017f9216ead8e08a8efea2d47e96c159e970caae3a36c0d2ec99d7da2a2d58344

    • SSDEEP

      6144:ZgiPfP8whdVy/JM6kh2lmM9wopNncgpITJWzQnk7bx:RfP8wveJMlhuao/ncg0WzP7

    Score
    1/10

MITRE ATT&CK Matrix

Tasks