Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3DISTRAINT....og.rar
windows7-x64
3DISTRAINT....og.rar
windows10-2004-x64
7DISTRAINT....13.ini
windows7-x64
1DISTRAINT....13.ini
windows10-2004-x64
1DISTRAINT....og.url
windows7-x64
1DISTRAINT....og.url
windows10-2004-x64
1DISTRAINT....32.exe
windows7-x64
7DISTRAINT....32.exe
windows10-2004-x64
7DISTRAINT....64.exe
windows7-x64
7DISTRAINT....64.exe
windows10-2004-x64
7DISTRAINT....se.ini
windows7-x64
1DISTRAINT....se.ini
windows10-2004-x64
1DISTRAINT....sh.ini
windows7-x64
1DISTRAINT....sh.ini
windows10-2004-x64
1DISTRAINT....ch.ini
windows7-x64
1DISTRAINT....ch.ini
windows10-2004-x64
1DISTRAINT....an.ini
windows7-x64
1DISTRAINT....an.ini
windows10-2004-x64
1DISTRAINT....an.ini
windows7-x64
1DISTRAINT....an.ini
windows10-2004-x64
1DISTRAINT....br.ini
windows7-x64
1DISTRAINT....br.ini
windows10-2004-x64
1DISTRAINT....an.ini
windows7-x64
1DISTRAINT....an.ini
windows10-2004-x64
1DISTRAINT....sh.ini
windows7-x64
1DISTRAINT....sh.ini
windows10-2004-x64
1DISTRAINT....nt.exe
windows7-x64
7DISTRAINT....nt.exe
windows10-2004-x64
7DISTRAINT....pi.dll
windows7-x64
3DISTRAINT....pi.dll
windows10-2004-x64
3General
-
Target
DISTRAINT.v06.12.16-PiviGames.blog.rar
-
Size
51.6MB
-
Sample
240112-l774csdhcr
-
MD5
3168c1e31b55d1b1f4969c208a0fe553
-
SHA1
c199410af5961088ec15c8b323dc94111085e8aa
-
SHA256
95acc4d1a274dd2edf1755278413d6d9e5e6485ade610a571c772e98c0fd30a1
-
SHA512
9e80f5f6c684ba59c9bc58be336995d7067c8fb8f486f0a9174a98065314248ddb50792d1ba1784fb9b61c8045c234376a05ddd2df73908c3576261f6a9a566b
-
SSDEEP
1572864:CmHBzYgPCxlxfkM62C5d/qHePM6P9fjsrz7x0j3IT:C+zJCxnfkMbQd/q+PM6PZS7+DIT
Static task
static1
Behavioral task
behavioral1
Sample
DISTRAINT.v06.12.16-PiviGames.blog.rar
Resource
win7-20231129-es
Behavioral task
behavioral2
Sample
DISTRAINT.v06.12.16-PiviGames.blog.rar
Resource
win10v2004-20231215-es
Behavioral task
behavioral3
Sample
DISTRAINT.v06.12.16-PiviGames.blog/ALI213.ini
Resource
win7-20231215-es
Behavioral task
behavioral4
Sample
DISTRAINT.v06.12.16-PiviGames.blog/ALI213.ini
Resource
win10v2004-20231215-es
Behavioral task
behavioral5
Sample
DISTRAINT.v06.12.16-PiviGames.blog/DESCARGA JUEGOS GRATIS - PiviGames.blog.url
Resource
win7-20231215-es
Behavioral task
behavioral6
Sample
DISTRAINT.v06.12.16-PiviGames.blog/DESCARGA JUEGOS GRATIS - PiviGames.blog.url
Resource
win10v2004-20231215-es
Behavioral task
behavioral7
Sample
DISTRAINT.v06.12.16-PiviGames.blog/REDIST/VCRedist 2010 x32.exe
Resource
win7-20231215-es
Behavioral task
behavioral8
Sample
DISTRAINT.v06.12.16-PiviGames.blog/REDIST/VCRedist 2010 x32.exe
Resource
win10v2004-20231215-es
Behavioral task
behavioral9
Sample
DISTRAINT.v06.12.16-PiviGames.blog/REDIST/VCRedist 2010 x64.exe
Resource
win7-20231215-es
Behavioral task
behavioral10
Sample
DISTRAINT.v06.12.16-PiviGames.blog/REDIST/VCRedist 2010 x64.exe
Resource
win10v2004-20231215-es
Behavioral task
behavioral11
Sample
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_chinese.ini
Resource
win7-20231129-es
Behavioral task
behavioral12
Sample
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_chinese.ini
Resource
win10v2004-20231222-es
Behavioral task
behavioral13
Sample
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_english.ini
Resource
win7-20231129-es
Behavioral task
behavioral14
Sample
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_english.ini
Resource
win10v2004-20231222-es
Behavioral task
behavioral15
Sample
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_french.ini
Resource
win7-20231215-es
Behavioral task
behavioral16
Sample
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_french.ini
Resource
win10v2004-20231215-es
Behavioral task
behavioral17
Sample
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_german.ini
Resource
win7-20231215-es
Behavioral task
behavioral18
Sample
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_german.ini
Resource
win10v2004-20231215-es
Behavioral task
behavioral19
Sample
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_italian.ini
Resource
win7-20231215-es
Behavioral task
behavioral20
Sample
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_italian.ini
Resource
win10v2004-20231215-es
Behavioral task
behavioral21
Sample
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_portuguese_br.ini
Resource
win7-20231215-es
Behavioral task
behavioral22
Sample
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_portuguese_br.ini
Resource
win10v2004-20231215-es
Behavioral task
behavioral23
Sample
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_russian.ini
Resource
win7-20231215-es
Behavioral task
behavioral24
Sample
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_russian.ini
Resource
win10v2004-20231215-es
Behavioral task
behavioral25
Sample
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_spanish.ini
Resource
win7-20231129-es
Behavioral task
behavioral26
Sample
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_spanish.ini
Resource
win10v2004-20231215-es
Behavioral task
behavioral27
Sample
DISTRAINT.v06.12.16-PiviGames.blog/distraint.exe
Resource
win7-20231129-es
Behavioral task
behavioral28
Sample
DISTRAINT.v06.12.16-PiviGames.blog/distraint.exe
Resource
win10v2004-20231222-es
Behavioral task
behavioral29
Sample
DISTRAINT.v06.12.16-PiviGames.blog/steam_api.dll
Resource
win7-20231215-es
Behavioral task
behavioral30
Sample
DISTRAINT.v06.12.16-PiviGames.blog/steam_api.dll
Resource
win10v2004-20231222-es
Malware Config
Targets
-
-
Target
DISTRAINT.v06.12.16-PiviGames.blog.rar
-
Size
51.6MB
-
MD5
3168c1e31b55d1b1f4969c208a0fe553
-
SHA1
c199410af5961088ec15c8b323dc94111085e8aa
-
SHA256
95acc4d1a274dd2edf1755278413d6d9e5e6485ade610a571c772e98c0fd30a1
-
SHA512
9e80f5f6c684ba59c9bc58be336995d7067c8fb8f486f0a9174a98065314248ddb50792d1ba1784fb9b61c8045c234376a05ddd2df73908c3576261f6a9a566b
-
SSDEEP
1572864:CmHBzYgPCxlxfkM62C5d/qHePM6P9fjsrz7x0j3IT:C+zJCxnfkMbQd/q+PM6PZS7+DIT
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
-
-
Target
DISTRAINT.v06.12.16-PiviGames.blog/ALI213.ini
-
Size
2KB
-
MD5
0d2e196a50fcf042142ac2bf99c535ce
-
SHA1
76308e29b5a64136286e32d7f01aa07c012c330c
-
SHA256
82b201cc15d3fd75b884bcab39e9a9701b6a1a809ca93dd96f14c0ff72e8971d
-
SHA512
3782edd31445c4d00060ab5b2aa21c56d67ec0d23657cb98fd6b9b7273be3594fad6af8781352b561256343412a2d764afad931ff5dd5205e8a3f0f6941ad31b
Score1/10 -
-
-
Target
DISTRAINT.v06.12.16-PiviGames.blog/DESCARGA JUEGOS GRATIS - PiviGames.blog.url
-
Size
111B
-
MD5
881fb33652adbc20432b20a6bcd17017
-
SHA1
9cacf95d8cdf29074b80e9bed71c88580ffb85be
-
SHA256
dc976e643e89e92e186cc875113c027c16843836e2e000edefcd2bcc50146ea4
-
SHA512
09b643bde7892f2ffa7e12ef7380a78f982b22ee25ce091950ad6ac20a5c44383a93e825b8002b10f15056f5d0e181c814bbbea529fff7256aa3769e14a40931
Score1/10 -
-
-
Target
DISTRAINT.v06.12.16-PiviGames.blog/REDIST/VCRedist 2010 x32.exe
-
Size
4.8MB
-
MD5
cede02d7af62449a2c38c49abecc0cd3
-
SHA1
b84b83a8a6741a17bfb5f3578b983c1de512589d
-
SHA256
66b797b3b4f99488f53c2b676610dfe9868984c779536891a8d8f73ee214bc4b
-
SHA512
d2d99e06d49a5990b449cf31d82a33104a6b45164e76fbeb34c43d10bcd25c3622af52e59a2d4b7f5f45f83c3ba4d23cf1a5fc0c03b3606f42426988e63a9770
-
SSDEEP
98304:TsPj6quMBYyuSFOMKykvYgS/ylTpHufHMpPbOZ39c7T3eeom2vJtPShg:wPjzayuSgMKykQgSaTkvMxEYT3OfPShg
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
DISTRAINT.v06.12.16-PiviGames.blog/REDIST/VCRedist 2010 x64.exe
-
Size
5.4MB
-
MD5
cbe0b05c11d5d523c2af997d737c137b
-
SHA1
027d0c2749ec5eb21b031f46aee14c905206f482
-
SHA256
c6cd2d3f0b11dc2a604ffdc4dd97861a83b77e21709ba71b962a47759c93f4c8
-
SHA512
75280d721550c2fa19b4f8d42b87d2fc6017f42709d84d2162c7330f7a0338bbd72cdc3f78626b10edcc602e2d22b174039254824334b3173d0ea48b3c06d1df
-
SSDEEP
98304:hsPj6quMcylIpk4nM6tmMUrfvEP0hcKju9Z/lTPU8UBHBKNpr1w36ZyY:+PjzDJ4M6tmXDsPKi1lTPmHipJwqL
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_chinese.ini
-
Size
78KB
-
MD5
808888cb0da40165d9160c8adb1580c9
-
SHA1
3ea10c8923284432878c2e357adeb2215161165f
-
SHA256
e6fb88bad8d42512ae6be128b96668af0833b9fc7bb6252d69fc0ccd29d8e415
-
SHA512
7a722473c31e13be6205e2ff26dfaf9d3c573502d70506ee2924ea6d6d26e0213574cf69e4f1eca21f5478eca69bfd95b6cc38459646647e8750a8c089ba12d8
-
SSDEEP
1536:gVAhvle6IdXaB4NKio7vov5GfaAQk9GvIWoLYBu8dsLjl+RBMPqk3TR7Nh1Rypw4:gV+ILd2wv8iAl9GeIu8OuMPq+d1kpw4
Score1/10 -
-
-
Target
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_english.ini
-
Size
74KB
-
MD5
165a005d3057278a066916a550f97fc3
-
SHA1
fd77d892e909a7c9e0e18f7ebe639d7cbc894c1a
-
SHA256
6c40152e3817595b6250ed0f425fc484b13f8f293affc460a7f2a9a8690779eb
-
SHA512
4d8287441be46e85a7c934dfd6e77e52458728fc373ecc05386a4263a137f13dc2b163944e37214ef553822a3df28d12cea7fcec7c65baf461a082721c7454db
-
SSDEEP
1536:GYm2krq1wRbxlC04dgtiO7jfMSJ37NCpeZ:GYNhAfZDceAI37NyeZ
Score1/10 -
-
-
Target
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_french.ini
-
Size
84KB
-
MD5
9e5ccf72725048d050ea6d9e404fc44e
-
SHA1
eeb41b45a29daac70eaa29ab706ecbcd05b33fad
-
SHA256
26db63c7ef3cf1b84530fb3ded63d9c182655397e9c2c34f1633a2961fa0b801
-
SHA512
a78d469ff5a96872fa5772bd6e4ac65c8ff97a04545929fb2330f11f3897c025e98194690c03d4f9b4906d201fcaaf0c1879e60b904ce3e9aaef84357f1524fd
-
SSDEEP
1536:snzGwErqEKXTuN88eTUsQrAteHVFAbOlOj/f3:UCwErJKXTuN88eTB+OmVFAbOlOj/f3
Score1/10 -
-
-
Target
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_german.ini
-
Size
83KB
-
MD5
ec7ed2ab5c29c142fb967de98f807014
-
SHA1
f01fff2f7fed7071434118f9e2010613698d3a3d
-
SHA256
143e7cc36307163b9ec4145f4620d89161fa5251a0e5f1c33ce693d6c8e5d16b
-
SHA512
09e96dfbff19e35af05024e98fd099f594eb69ab24cabc439b8ec4104abc43fb6ef7ca37892f5d4b21a9ac46bfc3c89c20c00f0de603f8e6e2464426a5dfc3b2
-
SSDEEP
1536:MOwQLS7Ikg9VkkQAaQqN7GsN6EgouEdUoW4GWdTQySvPubdyMcBJ5dMhlI:M1sGDgwPT4bEdxlGiQPvQqF
Score1/10 -
-
-
Target
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_italian.ini
-
Size
78KB
-
MD5
036f25d54d867580c508b85842a8a907
-
SHA1
9439e721545532d1e7f6af88e2c0e4a5234b710b
-
SHA256
0e9037cb644b61e1bb1e5675d5d7688ed23755c8186047b3ac37c995c02a2dd7
-
SHA512
ca9a9a1ac2c444ab7e5836459fb20b8fc72f22f38c43863c52abedfe6b3fe48ef33a9c33a7d4f6be86b90c910a6500ebe8bd701ba586bd79992a47315a5bc705
-
SSDEEP
768:+hiia/+QXDcarFLtzIWNivikFW4bjE94M2RCOBrFXTS163P41U5zyZPseru6P7DG:sMTXTFLtzH554COBtSWb5zyjpP72lmDI
Score1/10 -
-
-
Target
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_portuguese_br.ini
-
Size
80KB
-
MD5
5885351fd3a064c865b02fc92d866817
-
SHA1
a67c33a27165dc30b0f6b031158e3740c928659e
-
SHA256
09f075502c184f02277e148a19cf5bb584205cb86b603f4b7bbda94990e17956
-
SHA512
5f315b33e8475b09a5ef0179619e77caefc5127b960ed209631bad88c059c46470f93b2e922382bdf6b2e10c215473c492d24700bf1a7b30e19a3d41348c2a3f
-
SSDEEP
1536:NYVaOySZOEQocGZ3lg/6exqZ1eSwoVehKe2xC0c:NYIqZ3+/6ESTUh4g0c
Score1/10 -
-
-
Target
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_russian.ini
-
Size
113KB
-
MD5
c096f660c00e392df98ed55db21b6312
-
SHA1
750be82af726881d6636d977d8c8d96bea1a2d89
-
SHA256
34a342a3b5e30f47f8a902d1c36fc85b9d9639396b44e6e2554bf21febc4032c
-
SHA512
847d40555a39a6d193d21c15f7eff8a4c5b390d66ed80c9938a36bd9dbee11923acf29f9a6dc85e9d46fb2ab2b521ee89d1db3a330f034e749e03874e471b42a
-
SSDEEP
3072:pbsPvC1+Mnkn3ZYwxHvFiwpoIRTplcsD7qf1FZnJ:pbUvC18+wxtiwVTLcsaf1FZnJ
Score1/10 -
-
-
Target
DISTRAINT.v06.12.16-PiviGames.blog/dialogue_spanish.ini
-
Size
77KB
-
MD5
3207a2d80af7477f18781c95d1e58d1b
-
SHA1
a47560a51ddbbaef9f98cc2095e42a94f30028b6
-
SHA256
c8154e3ccfe96e7032ffe19e2eaa15b17dd27f6b7e577c7d75ab4d38b0bafa03
-
SHA512
ea9f769cb152ad2f060766d30697d12382a5130f5c2f9197ec47982b3a105d5dc71f62271741a7fafd1246ee6982756e2ed4c3ac8f55fd2b5a0d88e626a5f853
-
SSDEEP
1536:xP5Ah63XdY+PsnU+u1brIx/aguz9SMDUR4afP:xI63K+PwU+usVskMDUFfP
Score1/10 -
-
-
Target
DISTRAINT.v06.12.16-PiviGames.blog/distraint.exe
-
Size
41.9MB
-
MD5
2459e86fffde857954f486ea57143300
-
SHA1
e957ca43fac6c62ec64d5c38cca599db8c0792db
-
SHA256
750685c3c82567fcfc2e73c9acc7905f437a24bb7a8a65ef4818ff59e1941e5e
-
SHA512
9761478ab5e99199c362231ef7a1645130408d826d7a4b3186b5102dc13f32c1d376d35fe87fb37131cb18ee7ed56b502a5171f4b7e85496088be03676e269f3
-
SSDEEP
786432:nF4DXwTvNy6yVSs8caIZpgTmFxhSlI5hD1+bPpdv2T/ck9ZEwOVrkL6rDH6QVlgg:7y6yVXFgGxH/JMPpRY/ck/EwOVrkyrxz
Score7/10-
Loads dropped DLL
-
-
-
Target
DISTRAINT.v06.12.16-PiviGames.blog/steam_api.dll
-
Size
803KB
-
MD5
2f4a9213780fd351865af0c447212185
-
SHA1
2b50503d8df91ab41e623bb680d99103854a717b
-
SHA256
2e799090865407f6b507453849be0ca62351f5b72a8664bc00cc5e6cb3de5f02
-
SHA512
9e82f9f595c14f3f1d229e3afc470f6db07c13edced0d68e7f2dbdf59b27e3ebb4f22372f4899c83e29e63c4cb4bef3717040a83133554e8102e3114b78278eb
-
SSDEEP
24576:RRPsQGTCqvllA9VYQndskfEQeE+EInMPbc:jaCqdlAdFEkIQ
Score3/10 -