Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8657ff3812a238c2718c81a5ad2051b7ea339c0220c38bfe36a089d596479945.zip.zip

  • Size

    13.5MB

  • Sample

    231107-rqe9xahb7v

  • MD5

    4c255b3c96e32a86d7a7466d219237b3

  • SHA1

    3a69c31a62a05f3cab6de5f6366b19f0ab959962

  • SHA256

    29f9c1fc2f42c8ea4debe9d882c226eaaaa04e57add3acb2150c4c3e835a7b45

  • SHA512

    08978527fbdd4d29c49022ae0cebfa1949221f372ddb16017c386f27806ebbc370b11f2b976ae8e5034ed1a6d2bf9f1b64374472469bf888146ba985cbd1f1f2

  • SSDEEP

    393216:AY4cjU8Ky/bf38qJetS0i+5GbXEObtC93LdA:p4cjU85/bf8+etzi+5E0OhKu

Score
3/10

Malware Config

Targets

    • Target

      BINDInstall.exe

    • Size

      2.2MB

    • MD5

      e7199d90dbf41c9547ba5f9fa2560027

    • SHA1

      9e74cec6b33387d1456eb0c716713759a9d5a4f6

    • SHA256

      ff6b9ab7be17793185fb88d8f456641414d6e60bd0fcdbccff4d3726b919c2c2

    • SHA512

      3eb2902e015d6ff69630c2fc387cfb601c9eb042e870207781242e22f06db0b0c73008c16791916413bfc616d015fdf12db6c292c5c015484ba588af7b4b4068

    • SSDEEP

      24576:jc7K1WKCtfNZGOUk1Z9OLlZqvka6b67AXp/wuI9PUVKiQUlrwob61ORZ:zcKMVZKQElQQtXICQmO1k

    Score
    1/10
    • Target

      arpaname.exe

    • Size

      40KB

    • MD5

      301f1051b225f0af3366ebbcda5c3435

    • SHA1

      0f82525660ccb5fb5cf884602d392b10c8c749ca

    • SHA256

      7da72f06633873dc815b45050514304bc0d6188e3686e90a6302b5b75d44a0f5

    • SHA512

      162cf04b6c5f8d9ae47d3a660c9797d0cdb1edb6825d22fe9cfb07e492bb60dae4f07419f3635a6ff092d0ba50761d5a1b4c7282bd9bf84dc7e3f8e6dcc91a48

    • SSDEEP

      384:cWsaAWdbuqBOziF9FmP7NVv6vxwUbMPlRfs6oP:cWsrChBOzK94hVCmU8LWP

    Score
    1/10
    • Target

      bindevt.dll

    • Size

      448KB

    • MD5

      8375bb64ecbece8a38dc3108a3c9ed3b

    • SHA1

      6fa35ebb1850f7b6b9f55c954355b8f7eb80c870

    • SHA256

      b9ea5430e994f2eb28bed643121028c008033daa22e90de13c9f9c0bb3230b8e

    • SHA512

      3cced40929b643ef1d578bd1243611b7387fb3c6708f81a983668e7d1c8e89dd19d6dbded8f440a50495abf3af2caec2756aa9b8960ec8042e24703d6ee4db75

    • SSDEEP

      6144:dLyto9KMLecTR/bsUpbm97VQ8873FKBkDORsnb6ZYNNHdHiVXj:dLKo9PLecFTsU9m9E73FSRsnb62ZIj

    Score
    1/10
    • Target

      ddns-confgen.exe

    • Size

      48KB

    • MD5

      d763a5e3b6593a98350592a729d7a106

    • SHA1

      ae9d7209e7a4290a89a6254fcc7701d327a373b2

    • SHA256

      a3c25f34c783da0f9f0492ef23156f1529a45748e6f495f152f66b5f3aada1fe

    • SHA512

      e5771b307da57c4697c1a764ec708106f31250d362c96725cfb25b99bd3afa71505d329cf0496529bde3d5a0e7fedf9ff9ba058363d78bc0aaf3ba1779ff5b49

    • SSDEEP

      384:D0Ra5PweK8ZEhXl8AuIULuG3XZzsORZ5n0tKL5Ay6vxwU5TOAIVk+5Qy6oP:Doa5PwCCl45nZznZ50E5AVmU7IwwP

    Score
    1/10
    • Target

      dig.exe

    • Size

      148KB

    • MD5

      be7f0d006ffc22d5c0d83672605c3a0c

    • SHA1

      acef3ed89c5ddad982171503a8ae15e87d109b45

    • SHA256

      f17f338c36fc42ee50718e3eccb68fbe8efbca1da42e6764c8103f3eeecff27c

    • SHA512

      718f574d771dc85421e8f7cd5c2d35d50fd8abb29df7d91009d85ed0a60af067619bc601b16225a3217c44fc8a54bad156c45d6f15846f4ab77a874d1721240d

    • SSDEEP

      1536:ZxNqHzfMZl7Nf8sRrXxznIzxAktf5x+iarxfpjqmUc4:ZHqHz2mWr5nI93V5x+iarxfpjqmUc

    Score
    1/10
    • Target

      dnssec-dsfromkey.exe

    • Size

      92KB

    • MD5

      7c93450bb8379863b492780c77f3526b

    • SHA1

      e81c0ee97bcd352f834147390a0bc0a29da43f1b

    • SHA256

      528f6e4ac8287b35cef17d9d6cd542fb9d9832c4176dcf4cb037485498287835

    • SHA512

      49b99bf7075ad419f310b7afc5af88db735734a4bfdb2eb0ce7098170d54c6d98c80a3c6dc6438a5465f1a66144390fb9ae0348c35aae8cc0f049795e31bd17d

    • SSDEEP

      1536:nPtfmfoxaTFC00Ac619hsdzkOZqqspurfa8nn5FmU0uU7:nPtc0Ac619kkOZqVuTa8n5FmU0f

    Score
    1/10
    • Target

      dnssec-importkey.exe

    • Size

      92KB

    • MD5

      40c77cfecc564e280f4bf444f3955a09

    • SHA1

      6b868a2b558196bd06a5c0afb4bb6f04512173d3

    • SHA256

      a02b2e312a7b5faf97ee7feccaba058040aee033645498ba39b03287b38c5515

    • SHA512

      0d61f21137edde70b7aa652668a835c5190cbfd8def4eaa9319c97884272d9000b668d914e621695eae46c4756f57131365b7785094d424e2b0c5022e9e9cdd5

    • SSDEEP

      1536:tXjXEkNBeUxpyhI0+xW9zpSKSOZs/m/uv575FmUNoN:Sz9I0+xW9zdSOZUY4575FmUNo

    Score
    1/10
    • Target

      dnssec-keyfromlabel.exe

    • Size

      96KB

    • MD5

      19cf73d3908876ee3aca9173eec2c5ac

    • SHA1

      32acec26f5e7c8f6e074b51fc61559e7d2166eb2

    • SHA256

      ac844db362c7e21275eae5ba86ef343780faab9c0188bedeb56f0f092e594e75

    • SHA512

      4cadad4fba26b3d9f18007d583ffa81bc63c9aa3c3859bc036d9404b3df347ed292236e448d23bab0dcdb884cdd05e249b796d8a9a4de2a4c4b71db258e6f31d

    • SSDEEP

      1536:XXL0LVfGjym4eYxV+DeNAv9mUkvOZfyS7JZ3KWgXP5imUko:XAhqRDeNAv92vOZfyS7JZ3KWgXP5imUk

    Score
    1/10
    • Target

      dnssec-keygen.exe

    • Size

      104KB

    • MD5

      fac0cd9472ca5badea7cdbc571e82754

    • SHA1

      64d71c63390723320d8d0a681a76975e8d58e62e

    • SHA256

      18a3df6bb56d3c49c85463107ac9d3b567e1b66b5d0f5030d2a0e2582bc51b1c

    • SHA512

      8b3ee087a21a0d73f809346437ee44822bca11998a58a9453f63aed076ad6209b002c024b4fa4aa7269abfec31a4d2906e452f322c3952163f0e4d3500e5f51f

    • SSDEEP

      3072:lHlTXR8aFSGqOZK6fJZ3KWgsX9/5imUy:lHlLR8aEZOZZi

    Score
    1/10
    • Target

      dnssec-revoke.exe

    • Size

      84KB

    • MD5

      44f09856caf1c9f6ff10291c9919a974

    • SHA1

      0173691b2fe3911d7298bdcd5f75a5dc81581034

    • SHA256

      6babe13e62c99db701dae531ea0ed86f14af066fec4e7485b081ec901e21dd40

    • SHA512

      666eb27ad8a1e4b54e09f9987530937690f614a5a201208b837c72d6451f73b4aa9a32b29f3779ac12470e42f47808727cd9cc79f589dd640a7dfbca6ebb465e

    • SSDEEP

      1536:P9Bsrwt5P8VLmgMLJ7L4nXOZr0uBX1N5CmUfh1X:PnZgMLJ7IXOZr0uBX75CmUfh1

    Score
    1/10
    • Target

      dnssec-settime.exe

    • Size

      92KB

    • MD5

      355f20fb9bb2e75e76faed19c94ff7e4

    • SHA1

      e6bb6452ce16d2fdc14873bd96ea4e9b4fc7b4fa

    • SHA256

      98062b1195277c775d686195c818bb89b73b5aa7c3e88c150b8859fd0168cd4a

    • SHA512

      85d0cd03c6f5aa9496777e84d509006442ba765ea383bbd8c343a745f84f99f09c5e4dd32e6376b613b69f8c5504078b8b23f6e0353b20e81149ca24d03bc106

    • SSDEEP

      1536:2/iwXzxBoyGZSt+MZMyoHffYfbGL9OZfLAXKR5CmU+AFX:2Vo3yoHYfS9OZfLAXKR5CmU+AF

    Score
    1/10
    • Target

      dnssec-signzone.exe

    • Size

      160KB

    • MD5

      40896b711e33ba661c2e2d5ee0785a21

    • SHA1

      995136586ad652db6a2228ec4a1c4b79e279f14d

    • SHA256

      5907cc709882e0ab783dd042182c5cc14e534159fd257e12452c256f52e1b42a

    • SHA512

      9d2c74ed2167f300d54e7cbf4916d27a5451fe1ff57e6fbcb8114a1c30f784050e63fac071b5061debb1708d8a3e94f263f02255175d0ad43858d72efcec6598

    • SSDEEP

      3072:rtsr8xQ2nQair0tMGNOZpT3zeB/P+IQQ59GUj:ZWr0uSOZRDw

    Score
    1/10
    • Target

      dnssec-verify.exe

    • Size

      84KB

    • MD5

      5917ace29c1ed1ec355f7adfce209547

    • SHA1

      657ae9498bcf48b7294cef2e362701eff4c4eee3

    • SHA256

      3c3a4a61856984010224bee6a437d4422eae5467883614946eac881463b4d72d

    • SHA512

      1f8e2a9ea751debfdf814965e116fa6c26bd9beb996d29c7c2b7e4019e550af85ad4cd98d47ae18734ec57dc16587b38bbae10e2f9f584d7616ff83401ed08b3

    • SSDEEP

      1536:vrypMu+OfpVrLQKMFTDLS2tZcGc2OZ/tdAVzo59GUH82y:jgxkFTDO2zq2OZ/t2V859GUH

    Score
    1/10
    • Target

      genrandom.exe

    • Size

      40KB

    • MD5

      bd92fdacd35973a2e09966a4186cc014

    • SHA1

      49a7c0fbfbd372fd9deb5db2603be28e663e8be9

    • SHA256

      811ac4abf941af8cc87f775941e0a028afb7a1e6dbc68f4dc4465e403a689a37

    • SHA512

      8460a8a81a96051024aa8af3d4268c133bd571e5699c685790ebb792cc525c8327db081966894ca6c28de6dc83b3ce7b4538bc6b88107902d0342d84344b42c4

    • SSDEEP

      384:i3vBCCjOU4RfHagcquzNWq4eLAWiPxwUbIW9qeK6dP:i3vBKhrcjzzj5iGUtrNP

    Score
    1/10
    • Target

      host.exe

    • Size

      128KB

    • MD5

      239d8723ea96df329129474433464ec5

    • SHA1

      11ab9e78582e3356c4313e592e7a2177cb3611d2

    • SHA256

      6d49891a13da5e61833c1345dc0530309dddf2117d2905f93a769e632f61b1f4

    • SHA512

      a2812eb7b52177910ce997905d611bc81694ae00137d118b68c868bc5ebe1ba3568d399f3d5f4e47983495ecde6fa11929650f883e9dc3103f08b16c4a59c0a3

    • SSDEEP

      1536:iSeTP8MIrHkQKYvGm3di1N1ATiWHP7/VwqJrxfJcZGUV8:z8IdKOXdMvAOOP79wqJrxfJcZGUV

    Score
    1/10
    • Target

      isc-hmac-fixup.exe

    • Size

      40KB

    • MD5

      c245a470ada01db1a5038d31308a3388

    • SHA1

      9703ed5b443a96acc8ede71e5d2cea8f4109489e

    • SHA256

      c6e2027972dc5c2311bacc51a09fc481c6d201be4509e9603016fad8a29ae5ff

    • SHA512

      bdc2c25c48ea94a0a0581717c30d44103eca645b57121786fb47ae6cb1530ae783ce192aa297c06c7bc384d593d016532dfd825f843ab11d66f9c10f7c44bd81

    • SSDEEP

      384:bZQ/K/tLJzr8YPfWjBue6vxwUbTcYzRRs6oP:b0ctLJz/ukmUEY3WP

    Score
    1/10

MITRE ATT&CK Matrix

Tasks