Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

70e3f778f5...78.exe

windows7-x64

7

70e3f778f5...78.exe

windows10-2004-x64

7

$COMMONFIL...ip.dll

windows7-x64

3

$COMMONFIL...ip.dll

windows10-2004-x64

1

$COMMONFIL...e3.exe

windows7-x64

1

$COMMONFIL...e3.exe

windows10-2004-x64

1

$COMMONFIL...S3.dll

windows7-x64

1

$COMMONFIL...S3.dll

windows10-2004-x64

1

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...st.dll

windows7-x64

3

$PLUGINSDI...st.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

7ZipDLL.dll

windows7-x64

1

7ZipDLL.dll

windows10-2004-x64

1

CommonLogg...on.dll

windows7-x64

1

CommonLogg...on.dll

windows10-2004-x64

1

CommonSpecialist.dll

windows7-x64

1

CommonSpecialist.dll

windows10-2004-x64

3

ExtensionManager.dll

windows7-x64

3

ExtensionManager.dll

windows10-2004-x64

3

HTML/0_days.htm

windows7-x64

1

HTML/0_days.htm

windows10-2004-x64

1

HTML/15_days.htm

windows7-x64

1

HTML/15_days.htm

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70e3f778f52b04ad8bdb0354532a6a78

  • Size

    5.5MB

  • Sample

    240123-3yfq7adbh8

  • MD5

    70e3f778f52b04ad8bdb0354532a6a78

  • SHA1

    9b047fc3233d886b804b842a63b17f075359be13

  • SHA256

    209113be716dd92ebbc8da1c9aa8bb22adfda1da32e168055f3a56b1ddc0bbd5

  • SHA512

    d7709b671b4f656d25504f55de04906a95e7d092a817b61a19fd88c90a73b212e7ca7343f79ec8fcefecb4c45fec3ea27d00419985271e1b0b23e8e612e35e79

  • SSDEEP

    98304:rcz+qTqq77LnD7juT++XNwdqqr+4ATkOGG25cyx8j2FBP2KJlykmKkPHbDgI:rcSkqELnnq/XCdqNdkOjyx82BeKqjKA1

Score
7/10

Malware Config

Targets

    • Target

      70e3f778f52b04ad8bdb0354532a6a78

    • Size

      5.5MB

    • MD5

      70e3f778f52b04ad8bdb0354532a6a78

    • SHA1

      9b047fc3233d886b804b842a63b17f075359be13

    • SHA256

      209113be716dd92ebbc8da1c9aa8bb22adfda1da32e168055f3a56b1ddc0bbd5

    • SHA512

      d7709b671b4f656d25504f55de04906a95e7d092a817b61a19fd88c90a73b212e7ca7343f79ec8fcefecb4c45fec3ea27d00419985271e1b0b23e8e612e35e79

    • SSDEEP

      98304:rcz+qTqq77LnD7juT++XNwdqqr+4ATkOGG25cyx8j2FBP2KJlykmKkPHbDgI:rcSkqELnnq/XCdqNdkOjyx82BeKqjKA1

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $COMMONFILES/ParetoLogic/UUS3/LiteUnzip.dll

    • Size

      46KB

    • MD5

      1259c3b4bda98faf491bdfec7a147b36

    • SHA1

      c8d0a31672ab51a9bda2def63a5830dbf59a92c1

    • SHA256

      645fe3e7dc8ed3c2f363ee551f064986a10c36fdb9a37153b30ba5400cf738fe

    • SHA512

      fdcdbb1042ba5dc2a365345bed123f317e8735dba5d9dbf3d6583d40a728049ce6c253e3311ce427c924ba3afc846f25dcd9241fff4b2b02380a457cb55c7b9c

    • SSDEEP

      768:08zd/VxMu48xq5j+HW6D4nf6HSE53CtRGXDpD2F+8edR5xPa/JM:nd/VxMu48YQbtSE53cRGzpz8G0B

    Score
    3/10
    behavioral3behavioral4

    • Target

      $COMMONFILES/ParetoLogic/UUS3/Pareto_Update3.exe

    • Size

      1.9MB

    • MD5

      6ab06c422009751e04e2c715860dbd63

    • SHA1

      78fed4e72a77724abca6194dba84f3eff2ba0e0a

    • SHA256

      2c0dd3ca65a6578608563df1753b9ce89388d4907dc9ea95f5f6ca8bf71f46df

    • SHA512

      2766c1017911e97ad7d8cf4d8f7bdf3ea6c08ef76e5a74df4ecd376f3a0f53f1f49c7544679ca5c71725d856144d04184871f926112f5cfcfe3e1585458d289f

    • SSDEEP

      49152:wYTDBxsF2Lci2he3z3/ucVlbDYXJEH7iHbT5Sc7Fxsdt7+B0XE+ehEcPQD:vz7Lci2hez/LlbMXJEH7iHbTSdIB0XEY

    Score
    1/10
    behavioral5behavioral6

    • Target

      $COMMONFILES/ParetoLogic/UUS3/UUS3.dll

    • Size

      389KB

    • MD5

      e67d6c7c53aa79770425c756aea71283

    • SHA1

      e295fed1a41cec12fb10e5fd9fb6ffcdc2aabe70

    • SHA256

      b47d0897d1ade2ec3636e52265e2603870226b04085ce2cb6ee5301e7f4b8b74

    • SHA512

      b044bc2b08799469e9708286c4fd2fcf7e6d5b12e543c7b6572f599589f5afe5b6e7d6589a54c6c19754395e7dca246dfa7187d236e941a944642c25c66bd8dc

    • SSDEEP

      12288:S/fHAeW9e/7FKKBpGDwJkChY/CCsU9okb7+mBFD/:C7FKK/GcrY4U9ZbrD/

    Score
    1/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/AdvSplash.dll

    • Size

      5KB

    • MD5

      41be2441ee7c684eaa76a62d4223b4c7

    • SHA1

      05de8220e296db1025f7bd4d9de1f44370018162

    • SHA256

      0990902460ec38bcd605b518bffa081942c6f4c5fe1828a61ba3965bbf15d8bd

    • SHA512

      fec074a2196141e497334b57563dc7863a0b949d348164aec8c4f21d1b3c4ed795e03fd6e5726a2e90da7015abfbb4e28102647c0e343e84a707e99271a1a938

    • SSDEEP

      48:i/UYdq4ThVJttIETQ1lk+MfSvZcLLefNDpXq65wtBpuRNanZNA6zu6cv9n1MFM0C:qvTFfSc+0OeLLefNDE6OuXaZq6VG6MJ

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      32KB

    • MD5

      83142eac84475f4ca889c73f10d9c179

    • SHA1

      dbe43c0de8ef881466bd74861b2e5b17598b5ce8

    • SHA256

      ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729

    • SHA512

      1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1

    • SSDEEP

      384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+

    Score
    3/10
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/NSIS_HTTPRequest.dll

    • Size

      55KB

    • MD5

      52033e4f012b5ea9e6a2a719c5a9f2bf

    • SHA1

      14ae0a9600997b77057a6c07bdf0ad974971fc01

    • SHA256

      00b7b5c1addeb7404089cb44743701614717723397790a73a48118aecbc423b4

    • SHA512

      d3101723c485a28d1871ca49656b19681a36cee459d061ba8a66a97ead9e5d87d635bee912ebbcd5d743f1d562d4dbe0952d97987b7016fd0a6f54dacbc95f45

    • SSDEEP

      768:fRkeem9aVIuOdDSzL3cMSWVEDaoWX6P+QL3H6WesAAZz6Fi5RvJt:fHemOIuOQ/ZtEpW6TWAZJ5Rv

    Score
    3/10
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      959ea64598b9a3e494c00e8fa793be7e

    • SHA1

      40f284a3b92c2f04b1038def79579d4b3d066ee0

    • SHA256

      03cd57ab00236c753e7ddeee8ee1c10839ace7c426769982365531042e1f6f8b

    • SHA512

      5e765e090f712beffce40c5264674f430b08719940d66e3a4d4a516fd4ade859f7853f614d9d6bbb602780de54e11110d66dbb0f9ca20ef6096ede531f9f6d64

    • SSDEEP

      192:sRer7uivwq1XpKs4FVWSjMd8tIg2cREbyCsZ8q2R4Sy+Xe:s67Xws4FVWig86/5eCBqSy+Xe

    Score
    3/10
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/UserInfo.dll

    • Size

      4KB

    • MD5

      d16e06c5de8fb8213a0464568ed9852f

    • SHA1

      d063690dc0d2c824f714acb5c4bcede3aa193f03

    • SHA256

      728472ba312ae8af7f30d758ab473e0772477a68fcd1d2d547dafe6d8800d531

    • SHA512

      60502bb65d91a1a895f38bd0f070738152af58ffa4ac80bac3954aa8aad9fda9666e773988cbd00ce4741d2454bf5f2e0474ce8ea18cfe863ec4c36d09d1e27a

    Score
    3/10
    behavioral17behavioral18

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      f7b92b78f1a00a872c8a38f40afa7d65

    • SHA1

      872522498f69ad49270190c74cf3af28862057f2

    • SHA256

      2bee549b2816ba29f81c47778d9e299c3a364b81769e43d5255310c2bd146d6e

    • SHA512

      3ad6afa6269b48f238b48cf09eeefdef03b58bab4e25282c8c2887b4509856cf5cbb0223fbb06c822fb745aeea000dd1eee878df46ad0ba7f2ef520a7a607f79

    • SSDEEP

      192:y1zQhZDqlJcKISw99ioU3MSfwLF/+nhHUisdz:ozoZDGKYw9goWyFGBU7z

    Score
    3/10
    behavioral19behavioral20

    • Target

      7ZipDLL.dll

    • Size

      528KB

    • MD5

      f6d23610080e21cbfaa000444fadc8a1

    • SHA1

      48c034ddc65e5fe9869dd8ece3dc84ee5e3001f7

    • SHA256

      d0122d8e4e64e34623fd8623209064ff2f82d13b5b37be0c05da9fc02023696f

    • SHA512

      d47ac72b87e8e9dbb61658423b7d2855b5e8cf70aa5e813b66ab52b88ead0645e8f1f905369e8e6f307306a4c477e285f22c7d0a6a01745d78e3911daac364d8

    • SSDEEP

      6144:HQvft+9m057+DFGPx0S51SIkSj1eIbpDzhGMvKUkqvJ7nK588wFONQfnoCl3atJg:HQvfUEsx0jYeIbLGbF758xOCfytxpG+Y

    Score
    1/10
    behavioral21behavioral22

    • Target

      CommonLoggingExtension.pxt

    • Size

      146KB

    • MD5

      1e1f3ab10b4b9c889726b0241c5ef28b

    • SHA1

      a0fbc28a325b0f6e149ea17e5467c73fac57c521

    • SHA256

      aab701b63af2beea75bbb6851706fa74c026013c42d0034313845ab78a544009

    • SHA512

      bdb91ff5f315dc3990d4e658d4d7e8e6762eb3e0ee4a5e426ef0af90504afb1b4e4ce3881c66dd4bb2da0fe3a12253dcab2bb722cadaf9634fe297e14fc13d75

    • SSDEEP

      3072:FusvF08eTEvmexrPySOLAZzh+ULxR32GQZy5Zu2HxGnk46WSsCKzDur3WMQ8TFGI:FusvF0FIvmYrPySOLAdh+uR32GQZK02M

    Score
    1/10
    behavioral23behavioral24

    • Target

      CommonSpecialist.pxt

    • Size

      145KB

    • MD5

      b0bbe184c223bae15306fe693de38383

    • SHA1

      e5c62ee2c6c873fc35004c51d784d252588c1a3a

    • SHA256

      9c401dde470155b41a2f2fba0c7ebe86f3b30c88ca45390c9e87c3f21959bff2

    • SHA512

      fac1e725f89e0f10b8003520d0d5178606c010f091d4597f79e10dee6869fcec74290db8b6aa845b4a96be4ad00a752a027f5543b3f2afdc54d2389a8ade2902

    • SSDEEP

      3072:5nLmlmPuVTphBWCrgfz8DE39zWO1gkjCzZlgA78Nl:JamPuVTphBRrk8DE39zV2kmZl58b

    Score
    3/10
    behavioral25behavioral26

    • Target

      ExtensionManager.dll

    • Size

      81KB

    • MD5

      1abcbd1332cde96fbd79df5f2e0a263d

    • SHA1

      9c2576487c7339921f8daf8aa645636c94099bdb

    • SHA256

      e80b1c88d10b363379c51fbb0834f7ca03606383d9e739c5d391f513747f7670

    • SHA512

      f6bdf4fc1f4b329095a7917fdc720312dafc925194164113ce1b5bbdfd2c957d6caeec8a63d02f82adb88ea1de83d9964867432cb71f18ec1c860e81e986404d

    • SSDEEP

      1536:mSoF8WR2QNMLtynGN9MKo2ckNtbC2UXkph1U2zTrJLqh3jS:mSsvWoGY4tbJ7ugTrJLq0

    Score
    3/10
    behavioral27behavioral28

    • Target

      HTML/0_days.htm

    • Size

      2KB

    • MD5

      4e46ec6b9e6c03ec6c4e13466ae5d3ad

    • SHA1

      0702a4256072c4ee95e927f54e1fcff3f4f355ef

    • SHA256

      1f0d08021ba9ce385e488758d5c34c00a838ca620e6778e6e326a0d89edf6e47

    • SHA512

      a49d494ce192d22dd555274777ad5a7fc7888ee88edac9c2037e299a919f9378ed18b5131c08ffce6977620d88c250fceb5bb6fd59e5a3ff308ae2480a464d7c

    Score
    1/10
    behavioral29behavioral30

    • Target

      HTML/15_days.htm

    • Size

      2KB

    • MD5

      cd2f8ccfde8fe4c907b5208999b9bf15

    • SHA1

      afc233a88b4602790b5e0869b4fbd44eb2b673f3

    • SHA256

      512598fc1ababd554022d1110dcd5ee8ee3f85a700794c9b18a9a5ba2202ffb5

    • SHA512

      0eee59037c3af2d33b87226321857750fe4b3e79d14211d80e9a0104395fe16ec1cf5f56b88e06e066f492bd84861fce3ae233e0c19bbb005480ef6d0d833bf8

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks