Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b7f53e9567cfc4db5a83df680c31142780d9ac1027c88702d0e500bfe6ee899a

  • Size

    29.6MB

  • Sample

    231224-cbpgpschfn

  • MD5

    e17c2ced315d4b038ae5802e6bbce89f

  • SHA1

    73dac9d39815a0976bc16e4e1b01d3ecafacbe25

  • SHA256

    b7f53e9567cfc4db5a83df680c31142780d9ac1027c88702d0e500bfe6ee899a

  • SHA512

    c6049e29e988d2ad01ffe5bbdc476fa8648e0db17c57b6bbcf264b3b593535ed1a5a32c7feef49b877eaa059a9f05cde39f28490893c584aece2fe47c4beb04f

  • SSDEEP

    786432:QlODb9QwV9UEa2r2qPD/eBpprvf0VH8y0rR4Po:SOD5QwXJa2rNP4TQVHZNQ

Malware Config

Targets

    • Target

      b7f53e9567cfc4db5a83df680c31142780d9ac1027c88702d0e500bfe6ee899a

    • Size

      29.6MB

    • MD5

      e17c2ced315d4b038ae5802e6bbce89f

    • SHA1

      73dac9d39815a0976bc16e4e1b01d3ecafacbe25

    • SHA256

      b7f53e9567cfc4db5a83df680c31142780d9ac1027c88702d0e500bfe6ee899a

    • SHA512

      c6049e29e988d2ad01ffe5bbdc476fa8648e0db17c57b6bbcf264b3b593535ed1a5a32c7feef49b877eaa059a9f05cde39f28490893c584aece2fe47c4beb04f

    • SSDEEP

      786432:QlODb9QwV9UEa2r2qPD/eBpprvf0VH8y0rR4Po:SOD5QwXJa2rNP4TQVHZNQ

    Score
    8/10
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Checks the presence of a debugger

    • Target

      register.jar

    • Size

      234KB

    • MD5

      4380df4557c3b15d6fc8321fc20f5225

    • SHA1

      456457f55fa21fb7b96d44de2779eb168839d7fc

    • SHA256

      4b1596fc8dc40448b865258b45af959186e8a3715d9b9d26d68303a851427eb6

    • SHA512

      0c259904636f5d4c9fd9e4b8d0cb7562a74da89dd8385a0358cb40eb47dcfdc71e1277753d72ab28ceb47b598ca2c00e770da7bbe35a4eee5e1b2f53e1fc0c80

    • SSDEEP

      6144:a0B30366HsINmkMIa47XzymG0gvOm2B9wEr/k:IM8JzgF2vr/k

    Score
    1/10
    • Target

      safetynet.jar

    • Size

      559KB

    • MD5

      2e0c92a1384214c7a5d6927f402969e1

    • SHA1

      e99d881d23dfe528e15d437075dfc14ff9fb896e

    • SHA256

      c142282aa63814970580549a2657504951bccfdc40f4f19cbd8aaad118fe0e16

    • SHA512

      1d12c073f8aa3caff69929b5ee3e3b5400d930696cae6cc41e528bd87a5a0edc990b892263d9458729f6c5a2e59acd521cf26a1149e6b76d0e2fba25eb95bba6

    • SSDEEP

      12288:COqvmVSIxOgPkfpvt8Z9NBkZ3JBHRtTl1iZysM3POs:COWIxOVpvtS7B8POs

    Score
    1/10
    • Target

      vending.jar

    • Size

      294KB

    • MD5

      216183ad2cde7a7681ce086f213a8c8a

    • SHA1

      c1d2b1fad108fd385e93496581fefa1d0b2a8e75

    • SHA256

      35970f48ca9b23520c4844dba1215d66410789b1fdb3a263407e06799c07596f

    • SHA512

      896b29a89c21b23cd052751c5ca739256a108dccc89f3760a0463f2fec4d1cb7146dbd8d18ee68bcdbeb19c74a8a50acabf8a002d47b7475ffaa8b1d48aa467a

    • SSDEEP

      3072:2mWbsqjENEs7oYAlunxCcSBQ+JPgEeBNDTZUAMW1j4MF5E2APmgXpgg7+WuCROfU:qS/AlukcSoZ70MFDAPvgg7ZA8

    Score
    1/10
    • Target

      web.jar

    • Size

      755KB

    • MD5

      1c1611b386a4e63eba9652dd942274fc

    • SHA1

      93a9ad197c0e4b05988ec3f10670a3356d05c7ad

    • SHA256

      7b72652dcca0c83af340fbc350eccda504f2839099965702ec3125945c7ac127

    • SHA512

      5863a2c57d1f936bb7c7d612e7875cc3842bb6bf609d84fc45b204a7eb7324dbfae730f65298941e45c052cf4404ef105bda82cd1cdc4b479930677ca75e3ad7

    • SSDEEP

      12288:gjyA96pwhzKx4en3gc/O/McD8wAjxaPwzFkavNoqJui4ewVx3JQmu75:gq6Kzf/3cD8wAjxaPwziaF7ui4ewVxLC

    Score
    1/10

MITRE ATT&CK Matrix

Tasks