Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6a0e262919acbea86c5be2130191bb6fc8c91ebd5a53904e1b4f7642e863fff9.zip.zip

  • Size

    12.6MB

  • Sample

    231107-rcqtgshe87

  • MD5

    500444cd6af2794d32ce1f5eef38b66a

  • SHA1

    268d03c8bec5a87fd5f98cca1c6cee29a8f012c4

  • SHA256

    95e0e934fa4af0126102b508db9a798a7f48316873b30e9549d6ba448220fcf4

  • SHA512

    d982f7f368b44dd85f3fbea55f97d859786560ceaea1d74e2b4fdc4ef4609b288c24a1438c589918cee53cbe957b2e49bd54b46d66fbde06a59761f92fa07127

  • SSDEEP

    196608:c1191NW46e0QDVdNPCG0siNAAG1HneRAYnHFPVPJj+8Deqxz933+70+H1G42nO+3:crs4ddNPVbH1UAUPLN9e3VG4cSTG

Score
3/10

Malware Config

Targets

    • Target

      BINDInstall.exe

    • Size

      2.1MB

    • MD5

      2deaf592d2e6872c0b544ee439a8d231

    • SHA1

      536198d8fdf5879d4244c6676f179c7d281158bc

    • SHA256

      4e75471fb1c0b2dde8637fbb033a78003ad061d6de74803082c5a445068cde81

    • SHA512

      6dca1ef75adc268473bc3938e3adcc0ad895b36018e42ae444c428cb8b16b83801f826919006c0971467c310a68c25b7d06ed18a878f90871c3a0b521d9feade

    • SSDEEP

      24576:pk/ylUMrug6Jw1gZZxr3tLPw2a+q4Gu5GKnzM3TSbX/B:p2yx2my7ftlnl

    Score
    1/10
    • Target

      arpaname.exe

    • Size

      40KB

    • MD5

      e385ce7f56d6cfca8f4d3dd9574729d2

    • SHA1

      4a704ceb47e614e13df2ae8cd644ae26db567b01

    • SHA256

      7b6cfc14e0bd2eb26900eb03d0c1aae3ed214181d26b8a0f58f9fc527e386f97

    • SHA512

      a934cffcbb3bccadfe893e0043ffeb370866b6edde7dd4e6f4c17ee23e0602b2579794370a8d22589fdb1bb981f0476fb6ab62ed98f090d94cd04575c96d797e

    • SSDEEP

      384:vWsaAWdbuqBOziF9FmP7NVU6vxwUbMrlRhs6oP:vWsrChBOzK94hV/mUU1WP

    Score
    1/10
    • Target

      bindevt.dll

    • Size

      448KB

    • MD5

      2fa6e542bb3ffd5cec7ce3c819e71147

    • SHA1

      bb376a2dc4d151aa6134ab36291e634914239b4d

    • SHA256

      8aa31342f9cf09edda7571486b86197c55ef577f72b7e2c205665e7ea5c6cc07

    • SHA512

      4b07382ddca3f32a6736cfa10ffb6f94da9d6c6111e5a3e7e489625ee6aa3964485fe883e83a6c298fa164a73131a827c942dfc1141ba94dfd6bbf67e0782f65

    • SSDEEP

      6144:KLyto9KMLecTR/bsUpbm97VQ8873FKBkDORsnb6ZYNNSdHiVXj:KLKo9PLecFTsU9m9E73FSRsnb6asIj

    Score
    1/10
    • Target

      ddns-confgen.exe

    • Size

      48KB

    • MD5

      bf66286d9f07beb123d9749968d6aba0

    • SHA1

      19d9f5d2a06032d042ea8bb4ee3e3df9354ddc20

    • SHA256

      c21f2aea0e0647369dfebf8d765c62e524161c58d7f71b0c2f9331e63281af24

    • SHA512

      2ceb412ccccf2fc63ebba22e04b88674b97a4095e6a07d9429d7c5d6ba6b2511897346821b02e9de56754421825eca8f90e2bdd91a9fe580ffeb5c4877deeae1

    • SSDEEP

      768:izLQRA7J5CzLHG4zW1LnmvbxAjmUtXP4BwP:iQsubm4bijmUtX9

    Score
    1/10
    • Target

      dig.exe

    • Size

      140KB

    • MD5

      5fd737d8d24f09d00912ea36a4c4e5ac

    • SHA1

      865b5cc34d19cb7fbde72f94ed4baaddc602567d

    • SHA256

      2d0a28ad82a86754041cd71eb68b0ad686a6275dada580e47afba173aff9a419

    • SHA512

      cd54a09ffa763615003d98dfc26d6371d5268ad515655dd22482e76e5d4e2e29a87a7cdfa588923bbe3bfb02f53b0c971541eea79c473b38ce31b0cf4debce61

    • SSDEEP

      1536:0tkwL+sItQn5OVBzyoG1I/tH5/INf9820NbxD3imUsFG:zsItQ50BK1I/tH5m10NbxD3imUsF

    Score
    1/10
    • Target

      dnssec-dsfromkey.exe

    • Size

      64KB

    • MD5

      123c495441ca4ae4cdc8b275a3869e5f

    • SHA1

      4270aa34791c9a0a04e288d0a4a171e8d052f5e0

    • SHA256

      f44d9779132774cf3df6f99dd8be7972c1c7b7bef763e0819416f99b7e222068

    • SHA512

      514a17d0a4d51cac525e4274735435bc8fb4acccbf467673aab0d2319f52c8378baeafa97ab74e63cca0526e11d6073e641f3ff6e5502beaa6507852d4dc4fff

    • SSDEEP

      768:JERL0c1QkOpap9wgCcyyUEYupYiz4lpbDiBomUkbxJMwP:7kK0WqyyUaqlpbDAomUkbxT

    Score
    1/10
    • Target

      dnssec-keyfromlabel.exe

    • Size

      64KB

    • MD5

      c9a924a4d8c90f762e3858195f3fd8bf

    • SHA1

      8bec991b83e45d0400eab750f78b4636c0a9e8b9

    • SHA256

      3c5f8c4966d623c4f8b8eab97b49c20675b653c394948ed235d0aa7d491853cb

    • SHA512

      4d265fc4b3eba8330c39eb2d0a33e3fe128198da35aaf0e146df037785557024d09db1ba50a7d53740bd5ae630d5b03f5888eb65ab279dfe7fe8f71386e2c2fd

    • SSDEEP

      768:gGIH99pvpgNokh4yIzUAFVWzjheuwW2tdmU6VlwP:gG6XpgN5h4yIyheuwBmU6VS

    Score
    1/10
    • Target

      dnssec-keygen.exe

    • Size

      80KB

    • MD5

      57f20277695c8d9452bf92d03d67196d

    • SHA1

      c182c362a8cb85efd32eb48580353d75a5b0b0a1

    • SHA256

      c6d6054c61e263e86bcb918ff6203098e6195d06ca254c02b2965a3d05e05b13

    • SHA512

      836195c5baa8c0bfce3352d37e95958d5b2dac662d26a81e5d84e3032f5826a74883a7286eb94ec43654aa4d6dfda894d95b65adad67d7cfb0578ea1db7d221d

    • SSDEEP

      1536:iwa8pEkGCR7JeWF1+1EJZ3KWgsXCwmUMY:lTZRv1lJZ3KWgsXCwmUM

    Score
    1/10
    • Target

      dnssec-revoke.exe

    • Size

      60KB

    • MD5

      8bc6ead0f05406b9184da6e0d21ddb93

    • SHA1

      38dff0ddc4cb4bec1a1fe805187e956c0bd22b0c

    • SHA256

      540c845521a7fd8862dd1e2d788c706c95e86b6cdae51b548c18ae799b3d81af

    • SHA512

      65b02c53a2c2c710ebc7f5609e6700f367140396f22ca9fe37cc6351ed52f839deeb5eeabcb0a8d6928f4aecbc4d1dd40d26df2d5f04e8b86d7f011de2c63e8c

    • SSDEEP

      384:mAgHSEKHXO0Gmfhbs69sy6hzCnQvrZ2me+FgU6vxwU5g2H2I/Ybsy6oP:7gMX08s6SyQzHrkGImU1H2iwP

    Score
    1/10
    • Target

      dnssec-settime.exe

    • Size

      64KB

    • MD5

      c89d03aa496de5aec7527c418c4d96cd

    • SHA1

      f1399364012700faf52bd9f48e6750c7c72c5b63

    • SHA256

      3e4f83a1378ed16d3bd9b5f2823e7b7fb2cd4fa0375eb6d6ba90f5797c106daa

    • SHA512

      de3216dfaa389ada72566e2d4668f7ed2ae84aa1c0466a417d261a69870fc78e0ca8128ac3b11edbeef88be648b206d974554678a52af9322f461e153db546a5

    • SSDEEP

      768:Sz6PvIEOryTppUqeY6nPV9z+MeFa9WKeImUG2zLwP:Sz6XQY6nGMeFakKPmUGr

    Score
    1/10
    • Target

      dnssec-signzone.exe

    • Size

      132KB

    • MD5

      6a0eb5f97532fc83c0247840a833bda9

    • SHA1

      affc3d8062910634f80c4210d10b171f3c9b992a

    • SHA256

      cba4785d7b2bcd3740f1abcae351c1f573fe1bd58f2f923e2b721fe4cc5d5e20

    • SHA512

      fad9cede0a66576ddea458f166c53bb8dd274426db7559e1a0311b464c90cb5f23d75be051d4621dff914d196718a245ced77f192b6bb4a38d93903e08d7ff90

    • SSDEEP

      1536:LYtMUWfWvmuD/UF4E1E6Dh7pZtfXiB2DNsSUHQUD0AqLCCkRDHV4DAdGUTK7wwk:LYNza1wQFAqeCkRDHV4DAdGUTK7w

    Score
    1/10
    • Target

      genrandom.exe

    • Size

      40KB

    • MD5

      ef3c0cf5041df31b0c39282243f08acb

    • SHA1

      2ad3a1f01ea4169d8ad3b2b60c58ed79934102bc

    • SHA256

      13dbb7caaf7a32c46cf9af42bfcb55de9b86a7b17baa12c4df961b108165fa7b

    • SHA512

      10431b1e93f7e9358d4de68c1d331ba980150f148f4e7056f244a60192e8874de252477ab880ade2018c0e616ccbf6a2073834718fd4a42659f585f69e50d242

    • SSDEEP

      384:jSuHRskrQsU5Ho04zu75yenQbywA2PxwUbgFK+eK6dP:jj2Z5HofzG55nwA2GUyENP

    Score
    1/10
    • Target

      host.exe

    • Size

      120KB

    • MD5

      430527843b328460178118fa7e1906e4

    • SHA1

      5f6ca7d1168a554345a9d88207adfb8dadc2fbb8

    • SHA256

      ce70955c6d12c32f0d5c8100d4899ec4d1f5b5d64ccf483aae24fba44769ac60

    • SHA512

      f4119d48634d5702d9595f39cc3aeaeed809e6869308590cf91bcb78d4d6e84aa72c41f536ff1e762ba866564255d82f78a3d33d3e18a68b1e6e889527b51f68

    • SSDEEP

      1536:9g7l7XkC3CtuWNFkK4wy7yfgfBxdXtSKH/ObxDX4GUKVPYDN:s7PCtuYFkBwy7Agf/fHWbxDX4GUKVP

    Score
    1/10
    • Target

      isc-hmac-fixup.exe

    • Size

      40KB

    • MD5

      6a030dcbd282c8e5500067392eafe79b

    • SHA1

      33f3fcdec9f0c27ed8fb866a2520ad1cf0fdf6d4

    • SHA256

      c0b773a4c8013ce23b8dca13df23ec84e9c362f6493c9e48db59ae4b727332eb

    • SHA512

      d5104f119aee81be2ca8d6b72d123be769db85b4f7be234e73ccb916611e9cff15a25f6069b39b39137dbfcb72b40d3a4b72c285c2e2807ab191dde6971360c2

    • SSDEEP

      384:JZQ/K/tLJzr8YPfWjBus6vxwUbTTYzRDs6oP:J0ctLJz/uGmUbYxWP

    Score
    1/10
    • Target

      libbind9.dll

    • Size

      96KB

    • MD5

      1586a11f0a8f7107a2e21e429347eb6b

    • SHA1

      bc2773ea700f6cb9b920f93e9c69eeccb64a5457

    • SHA256

      cff5016e1341e96f9b0e2d45a21336da9185332460a1bd2cc5e00a7d4f3e1904

    • SHA512

      d5737a40b94d769a81300c9ca2db5fd25ddbd782d776d94d15a694539a28f8c3249efb28f129a2aa217d3d67db9fb25257b1291df1633ab4126029cbd445f8b7

    • SSDEEP

      1536:GwRcRrF4Ar7Iu/05qKK1wfSX2yVUmdH7mUNKGUT8rB:GWcVF4Ar7Iu8tKyw2y2mhmUNKLI

    Score
    1/10
    • Target

      libdns.dll

    • Size

      2.2MB

    • MD5

      483fd4685cad20695e26dcefe7a0cd70

    • SHA1

      e1dc00e2f996e4c4daff89cce4e29e5aa2585138

    • SHA256

      c114e61d738c3eb4a1a97f0930a8bb09384fd81eda0287d222d3c7602cf9cb02

    • SHA512

      f2e976aaeca0d75d4969fd9aecee9dede133b7be33f7160a9898fc8907b49e0f1526d023cee0960fc4c54165c78349faae0c2eee41338091113e4deaefcc61a5

    • SSDEEP

      49152:cffywAmJ9eBJnI+hDooOV1MTEVvfGsY1SGryMglKGFcFZZJfZC4amfhCzfsPHqp0:cUAzfsPHqpvM

    Score
    1/10

MITRE ATT&CK Matrix

Tasks