Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

QLCai.exe

windows7-x64

7

QLCai.exe

windows10-2004-x64

7

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c6339d64560f8d8ca3e0a9c3c5a59bd

  • Size

    4.2MB

  • Sample

    240101-kg8frshff2

  • MD5

    3c6339d64560f8d8ca3e0a9c3c5a59bd

  • SHA1

    755b444ca60c1d1cd1e33e0fb9e8a26a9b1d9ac2

  • SHA256

    0c423cf66f061e55ffd7da969058397142c7f95c0a886b7c483f3d86ebdeb1f9

  • SHA512

    af72924cafdd1d062092285cee0aa558f911272948b073dd0b57c1d6b55772e76093301dc456a532fd896352bb3ab52865900e4f8ab006295eb0a96216944105

  • SSDEEP

    98304:i9K9sEyR+cZ2PjP9p567V8uGY+rnrqZDxZ3Oq3p8tKCGOmZISzeR:eK9GXsPxp567+uGFr8VZ+q58tKCGr2HR

Score
7/10
upx

Malware Config

Targets

    • Target

      QLCai.exe

    • Size

      4.3MB

    • MD5

      2b25f6a9806d2538f2e0207feac8872c

    • SHA1

      d1a04bef387032d0ebd5e35aec7583d748d48568

    • SHA256

      c38e45bcf35206fc74a3d4e6e29377156e5c31af1f3085904c216a32c6305df4

    • SHA512

      02e13d15783eb9a4d2a17365d2e6c25d2adcd83146a321167ab0477773c7e5c7796a61ad4bfb936358a921e3c9082c5bc16c257b0c6d9f79497d65e6e6c16cae

    • SSDEEP

      98304:5+a6JLjH3dutXJSTP/sAQvA3W2nm+06ZANcu5ej60RZHcZNK3:5+3Jn3wOTPlQ8tm+0OImWIZf3

    Score
    7/10
    upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      新云软件.url

    • Size

      133B

    • MD5

      4f0017b3b346bd0626f0c3b915e6e734

    • SHA1

      823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92

    • SHA256

      df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678

    • SHA512

      0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks