Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3b946659d9ec704bd1cb8cc2a0bc3f86

  • Size

    5.3MB

  • Sample

    240101-b6f85scca4

  • MD5

    3b946659d9ec704bd1cb8cc2a0bc3f86

  • SHA1

    70772418261120906b395f9fe14b28573f3c91b5

  • SHA256

    e13c66ae1d4df6f6b364aa1ab9b305bff536c16701d18e0544d7498fa5fa90ab

  • SHA512

    ea8c579f0ccf359488b518d9a4cf9a1ede7d92c7ce9c5162b068f675b37d44dfad9f568063e0ae88940cae275ac84856e9c31bf52e35ebcbd8b6e70181b289f5

  • SSDEEP

    98304:DDRQfY1RygCRYJ2xuFMgQwKmLBdeSDexJLy4C++LQL4yWk73ySV1rhb:D9QyogCmJ24FIwKtSDev95+JFkbyErx

Score
7/10
upx

Malware Config

Targets

    • Target

      ClientSetup.exe

    • Size

      3.6MB

    • MD5

      3439fab56ae86d13e751a7df5715b339

    • SHA1

      01c4d24db6fbb4a6fbe15f1f61e3fb95a519daad

    • SHA256

      6b6fee52bd65eedfb3552f948e5aa360e0582707755537861e62ac01e31aac4f

    • SHA512

      b9ec4c64edf406cabcd98540cecb4bc0efad4ddfd37ac193f33a50b66fd8985e7252571b6c9a1382b335240cfadf9cebb8f6ac72269ed979c1786fbcb5f3436c

    • SSDEEP

      49152:hxBb3umRcMuNvYMyeTIzRG2Ucc4qwmepiAYVvCfZRXy/kPZk42Hzu8+aheU25Yo8:hz3WN/+VqwbpjcSisFGwnVy

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      ServerSetup.exe

    • Size

      2.0MB

    • MD5

      78b620c7ac858e87b39bf02d7b2086a3

    • SHA1

      bfb3052ac0690ea93a9558dc14eb1baead2526bd

    • SHA256

      bc25ea0accfc2382cde4574f2e0aa65ab62134bcc0398a7f6ba302501e555a2f

    • SHA512

      d0c20d3a3c1f8c5e2466022dfb03a92debfa9aaae0f5250fedb1214c34d8892fda792d7e4cd03f588b7c5dd0e81c9d30fea9eb10f12c4b947d5a1d56026e2ffd

    • SSDEEP

      49152:hi1pRP506e7tc2juZF4EQqKxScDa7VwU2aYogi6O:huP57e5c26D4EQrScDMnVN

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      Conn.asp

    • Size

      278B

    • MD5

      de4c21548d7c30975cb2e951d435246a

    • SHA1

      63a5ed3eef34b55bb188ce45f88b21b45761ad97

    • SHA256

      ac3978e15a7bedb5163a33881de6a1bf61905e3c2d8220ce0e4f3d89ae2468ac

    • SHA512

      01f6d310172c716dce964f3241a8f9beed0f951a6011b0793689d26143ae333e7deed27f5a0c40f363d6da37f4d3f736646f1582e03c013c24d3796d2d214c32

    Score
    3/10
    • Target

      action.asp

    • Size

      2KB

    • MD5

      1e20dfd140e96a27afae084f3e332a59

    • SHA1

      6a8293df40c490e83a8416c4bbd02f910206f22d

    • SHA256

      339568db9f17724d3caad23f97e694c70c4103368d3f886b99f862376f40dfde

    • SHA512

      873e9551f9b6a7d023d5372b2a09828196904c8aff752f3153ae3390cb9062c9b9104aac0db476cdaf75473f968477f878f5cb713287411c5b32f3a811d95413

    Score
    3/10
    • Target

      bottom.asp

    • Size

      682B

    • MD5

      f184b7ea2493da36afdde974666bc345

    • SHA1

      3fba401b26665cc177fbc1c749de2f9e61e6ecc5

    • SHA256

      ace1149bc2051aaa02b6a3494b77ad4a37db75fad7f18b92e4bd1d85f4a54ef4

    • SHA512

      54615b6f5cc729377f3b29e3616c0bacd57ecc5f12d7a9fcfdf6fee5ee3c4ac0f2640dd29968643acfa9ff8e55062b5f69b1ae6cecf8cf76e724e757d040c6ba

    Score
    3/10
    • Target

      checkSys.asp

    • Size

      1KB

    • MD5

      db49ce69b6a0ab728244579e39d4b64d

    • SHA1

      1ab1ea3fe30233253d3283569f566ab758e70acb

    • SHA256

      93e8a03ad666fc0ac7458853d0b2727e58f61addbca537eaca780dcec8661e66

    • SHA512

      8751236a5542e8e0a982a1a6ae6720e9a79745ef4a2ce2bd7fcd80824fdc1edcc64809f77caf18c699a9c2d210e6ade8292253f8a63320a1b8c1dc1b1bb290ff

    Score
    3/10
    • Target

      chk.asp

    • Size

      745B

    • MD5

      1b055cc503a8ec523951a14497578bd0

    • SHA1

      716894df283eeaf2538d02dba57b7b9b48ff7db7

    • SHA256

      76a60e12d0eec393a19d69c8cc31604fe7c6af0c75ca57896926630902eb3357

    • SHA512

      35e78b02d222d5a8377b4b68f349e547f6430c144c14484a6957248789a025beb3dfd3f930ae13cdb777907f1dd275a9b52354c508485c02d2f31b5691c4cf5b

    Score
    3/10
    • Target

      cxctl.asp

    • Size

      5KB

    • MD5

      1afcfd248e6765217326023ecc57cdda

    • SHA1

      15bca45a3e94aadad1a567e8a9d70b4a6371fdf5

    • SHA256

      20240fed1b1dca5fe833eefe343f4723e99c4feaf1b2af994ba8ad596b7e31d8

    • SHA512

      9cdc64f59174b862020f1e93c23bbf72150b0c1f99fd7fec1d3aa7c2ee6729fffff90f610046ebd56cee8606e5dd719deb9a75f2d9262299f431115e3b8ca57f

    • SSDEEP

      96:AjkIMj3AeVREF2nVuaAGnTJsTbvXb88xb:gkIyFbEFArAauT/Jxb

    Score
    3/10
    • Target

      default.asp

    • Size

      5KB

    • MD5

      6fafda815c3153c00a774a1978995723

    • SHA1

      5d73e74ed14abd47af052bd8fc1aa8bb217af17e

    • SHA256

      ecc8ef07cae21d7061ba10270da121c0a7a591374d03e9b35e7a1cf0b022fd1d

    • SHA512

      5637ee29ae696fc7e4759c057fa624ab8ff8e5e8dc41d4230858be183e156d7375a09b21002fabf7e89b0a6bdbd940821a6776e18feca515407d7bf7159a7495

    • SSDEEP

      96:ikIdQWCq7S8ZJ/EmiApRB7nfapQwW02Xi0sbZ/6Mh08ddkddEdd/dduedddd30CW:ikImWi8ZD7fAkiXJ6E0HJ1

    Score
    3/10
    • Target

      dt.asp

    • Size

      476KB

    • MD5

      ee0baad48b2f32032b6891c37487d076

    • SHA1

      25c18c1e6ae6a606c95e1680c48bbbf5344b8f80

    • SHA256

      8df9e80aceec79e861103f51325ba5f75f2713a15a9c8845ed28bee6ff67d43d

    • SHA512

      e5db06fe56227ed02c15432261160bffd6ab5afe7db05f4364e3f444fa72c318bf05b250a3219d2fe3d29d2dec64c1f66071e0b8a0efdcf6d1d945fbe57699f1

    • SSDEEP

      768:h2a1PT+Ovy7xlEkSXPhmw+AEUTSwh50nQTWFiCdwh0o3NWcqvjddqYiuqX:h2aXy7xsYeSwf1d

    Score
    3/10
    • Target

      getdata.asp

    • Size

      5KB

    • MD5

      0ca492d5acbc544870503577e2ac789d

    • SHA1

      149863413d06c11e4cebabf3cda73e03edae6051

    • SHA256

      aa97d042663b782902ba0869f4b58d80f81561331977ca0c3b7ed17c936c3897

    • SHA512

      d618189601a241d56f75ba53d0434b3f99cfe1b8a576e4867c74c82a003f1e135bdd4e3bb09c22162dc2057abbcfd7586c8b4f8de640a6460956cdf89c8d0717

    • SSDEEP

      96:IkIoESSV55ZnTgCSdmf3YG8qYXzy5oDYU+FMaPIwPLdzdm6YcGp0y6soNmdw6LPL:IkIoESSV5zTgRmforzy5oDHagwRE6YLj

    Score
    3/10
    • Target

      gfhcx.asp

    • Size

      1KB

    • MD5

      fb6faed53d1f190f5da9723134953e0c

    • SHA1

      1550434d032d081b417aaa5f75ededb182fc465b

    • SHA256

      cfa0a2ced265741bec4d08b26144618d74e3e9cac8ed000d10a3fde5fb57e31c

    • SHA512

      d2f3a2fe9ec2ba0aa53b7c13cda1f340edeaa6a71fe6816cac06cb157b8d6bf4be180ed0000f5cbecb3158bcbc805f58afb0dd5491f37516f081674c00fca1cf

    Score
    3/10
    • Target

      groupset.asp

    • Size

      5KB

    • MD5

      f7893a94bdcae447c12bba7e69d3d89d

    • SHA1

      b76a4fe463f4d25818949c4ecdf0e271a5272d00

    • SHA256

      dffc1793dc82ceec44d5e651d7c0bf0f3110923a0f7b649dcb471f189f375a94

    • SHA512

      c24336a3b66e70d00695e64ccdbc7a45e07fdb822a5e640e329c91561adc80392cd5aa6d842ee63633ec329c952cdd6fba91160f527cc5074ca8354906e7173f

    • SSDEEP

      96:kkIRJv0/nlhEYEYLU+YmDA9dM4//8ShkU/pnhe9CvoUDWQRESzjSd3y3RM+KC3Ot:kkIRJv4nlhEYEOM0A9t8Shkanhe9Koa4

    Score
    3/10
    • Target

      gscreencx.asp

    • Size

      1KB

    • MD5

      56373533210411bdf467807553904fff

    • SHA1

      be756ba3afd1ef24b553b87ceedbfe854b099a6c

    • SHA256

      d9c6aa18f3fdc9b4b2f3c71171952c838bf0def25c1dd62499cf3827e066bb99

    • SHA512

      c7d29216301d157efaf187a4f3d36999900c9a94d6706bd91a41b33f461bca6f0a9ed7176c59ffa76bcca60c27b9097c50c4011813fdf8d482aadf976b7ef21f

    Score
    3/10
    • Target

      gsysset.asp

    • Size

      1KB

    • MD5

      b73b8f13e6b469589eba2f64dca8f992

    • SHA1

      4ce7f8a67b767645b9f71f67b1cb8b865f12b863

    • SHA256

      4b3c096dca6a657f59fdb11f153e76b7778a342444b5c44b10b54922ae5efaab

    • SHA512

      f0868d02680911847f4200bc0cdbecc039bbc688243f32b6c76ae9ae40c5ffa61b82eede7b433ff2d3dcc2abc9001a669d18122afebb528866f7058e98269a5e

    Score
    3/10
    • Target

      gurlset.asp

    • Size

      1KB

    • MD5

      c287aec72c60315109361799bbd25e54

    • SHA1

      268ee63cee0887855e31d569ac92b81d57210d41

    • SHA256

      46d1e24d4b7f6bc40b91d6d7adda131ecab23b3c12ba9451a24d0db5f7ee5444

    • SHA512

      f4b5d884bed18ccd3a5a52a42bf73295118cf527962975de87f6f0d3debb26c99236bf12bddcd13541b64566c4339ee5b5bea643a511ddff68e539b995f34e5c

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks