Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

7210e90869...d8.exe

windows7-x64

7

7210e90869...d8.exe

windows10-2004-x64

7

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...am.dll

windows7-x64

3

$PLUGINSDI...am.dll

windows10-2004-x64

3

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...ge.dll

windows7-x64

3

$PLUGINSDI...ge.dll

windows10-2004-x64

3

$PLUGINSDI...ug.dll

windows7-x64

3

$PLUGINSDI...ug.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ta.dll

windows7-x64

3

$PLUGINSDI...ta.dll

windows10-2004-x64

3

$PLUGINSDI...ck.dll

windows7-x64

3

$PLUGINSDI...ck.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

1

$PLUGINSDI...LL.dll

windows10-2004-x64

1

$PLUGINSDI...hk.dll

windows7-x64

3

$PLUGINSDI...hk.dll

windows10-2004-x64

3

$PLUGINSDI...te.dll

windows7-x64

1

$PLUGINSDI...te.dll

windows10-2004-x64

1

$PLUGINSDI...ta.dll

windows7-x64

3

$PLUGINSDI...ta.dll

windows10-2004-x64

3

$PLUGINSDI...gr.dll

windows7-x64

3

$PLUGINSDI...gr.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...nd.dll

windows7-x64

3

$PLUGINSDI...nd.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7210e90869924eb8d652281e4a2c7cd8

  • Size

    840KB

  • Sample

    240124-m59d3sgeh5

  • MD5

    7210e90869924eb8d652281e4a2c7cd8

  • SHA1

    e6d3b51b68d67415cd2fc5fb8e9fe1b6be407e40

  • SHA256

    557c52ce5b2287387b843a22af6e4b84b200f67e4c869a7812f713b050d73f9a

  • SHA512

    fc730eac45eecc043466690aeeb04ba9fe5fb79444fc7fef6951fbbdeda1612e52e17069630c91e35d78039733625be768165565f8109a8ec58ade8794c18cf9

  • SSDEEP

    24576:SiwRwU3UXu5Hs4BTqLVx3tHGkEPWlQN/XFXA7ui9wD:vHzosjZxdHGkEPWlC/XFXA0D

Score
7/10

Malware Config

Targets

    • Target

      7210e90869924eb8d652281e4a2c7cd8

    • Size

      840KB

    • MD5

      7210e90869924eb8d652281e4a2c7cd8

    • SHA1

      e6d3b51b68d67415cd2fc5fb8e9fe1b6be407e40

    • SHA256

      557c52ce5b2287387b843a22af6e4b84b200f67e4c869a7812f713b050d73f9a

    • SHA512

      fc730eac45eecc043466690aeeb04ba9fe5fb79444fc7fef6951fbbdeda1612e52e17069630c91e35d78039733625be768165565f8109a8ec58ade8794c18cf9

    • SSDEEP

      24576:SiwRwU3UXu5Hs4BTqLVx3tHGkEPWlQN/XFXA7ui9wD:vHzosjZxdHGkEPWlC/XFXA0D

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/DLLDownLoader.dll

    • Size

      28KB

    • MD5

      0d613461983c6a2ed1be2e57b67e3ec7

    • SHA1

      274e134bff3a1cc2b15b84f5c7d42f039ce0504f

    • SHA256

      cb0b9edbf618082037aee9c618a7e28da3f66fa01210b425c08ddacd65bdc44c

    • SHA512

      cbf8f2d9612740ab697ed495011cd7ffe2a6873f229374c0d0bc034bdfdfe07d5f65d8f6b6835db52ed8c133bfe141ff5bf08c23065902701cfa90c468b8911d

    • SSDEEP

      96:t+RBpCB8OnNWxYeUXiJsVgcAOErirmYDi1w32wJVoilgtxMTuRQTGo1Qlo:t+RKDnYUPScymr1lGwJigaxMTZTNGu

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/DLLWaitForKillProgram.dll

    • Size

      28KB

    • MD5

      9c4b8ec42d89f7557bfd90798ce52787

    • SHA1

      2376dde426ea65aa27c30e304086310605382475

    • SHA256

      ed52bdad7b383a179b9b0e21fefdda2d72695c5263a815d5e1e0bfac6c718548

    • SHA512

      17c12a27a08746755868558c037376dd7e20f03f0f71888c1329903b70975a54f57786c3c32bf88aaf30119f11ed978a6830ba91949e11cfc94fbb5ad95305b7

    • SSDEEP

      96:EP5ZuFye0MyQW4uPwhs+R/+gFrE1m/U/uG98bp2y+HS21kEZ1b+4Tu9C1uGg8wBu:akFyFRQ5wIzlH/UGq36EZY4T+Gul8U

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/DLLWebCount.dll

    • Size

      28KB

    • MD5

      0bdd7c6f1046ea4b42839f991ae53fb2

    • SHA1

      cb9baefb10159b4a684fa1ee4372e7715865052d

    • SHA256

      0a0019b2603dbc4505453c2501255ab0cc0b3c317ece4a6ce0cfb6a02a30907b

    • SHA512

      96f41497f25d7bc81f51ab167f74243b4b767089c89c26f9752ef518fa60dedd2722c66ae87dad2334bcce1622bc12f7b9b892ae654ca58cecd9f35c9f1dc163

    • SSDEEP

      192:OQoR7CK9FX/dVPWtJ/tXP88bSNwWW8+YdbDT:OQcWeJ/XPWtJxPFYi8nb

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/ExAddPage.dll

    • Size

      164KB

    • MD5

      e8aa85f60fe484ec6c576ca1a740e2e5

    • SHA1

      2c891f1fe56ef12bfc2fb6c38a04bb77430406f5

    • SHA256

      8449a12ced89215245ccb55b6b7693e2c6ec1acb06a28597f4a8f19a12dd32ba

    • SHA512

      3823c421bce33a99ea1a80dec409b36bf41988c86cda97f93f065b57aeb7177dcaf35063c22c014ad275293722095a8f02971bbccda212f223d761ef1aaa5b7e

    • SSDEEP

      768:d/RkQss0Ikxfo2GMeydrqdq/LFAurfVVjnK8Yx+jkmTbTTTTTTT8uvTgTWCPZ5:ZRkQss0Xxfo2GMeIqdq/LFAIfVG5PZ

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/FILEDownPlug.dll

    • Size

      20KB

    • MD5

      b118053825642ecf3bba36500a70645b

    • SHA1

      ce436f731bd8bf744399bf39e77f7bca5a4461af

    • SHA256

      eb97c0e8d17986beb01c1366405c8fa70e5d69c5f82b30f184454a47c258fda5

    • SHA512

      11e00d2e2fc6b85e96de5b9fd11ea3f1d681180879ac3c2a7cfbe35a3808466f8eaff70faa39d6f5739238a34558825a22f0887d5653df54305a3ccce3836c73

    • SSDEEP

      24:ev1GSPqbz/ZPQ9/4l4V91gCKoEbWOSrcde:qQ/BQ9wWhH

    Score
    3/10
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      325b008aec81e5aaa57096f05d4212b5

    • SHA1

      27a2d89747a20305b6518438eff5b9f57f7df5c3

    • SHA256

      c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b

    • SHA512

      18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf

    • SSDEEP

      192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo

    Score
    3/10
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/IsVista.dll

    • Size

      44KB

    • MD5

      344d13fd0fdd2d97e8d61960f40a8a30

    • SHA1

      3f0f120203005eea3e8ed1652a6ea8a607ea934d

    • SHA256

      17bb3331e2300aa01666fbee98b9552cec5e46212a4c5a340c0370b93df88f83

    • SHA512

      b4e49c58503532e270cc369f1cbd14d85edd46da5ab034dad730bd4297887dd541d445d2fbf205820e6afbbdba7ab6d5b78b694467554320fd6db8e06fe4f719

    • SSDEEP

      384:x4MHyTfkIbqaddF1qabhJfl7Tisz7c7t3TyAvdjWu875USXdvlHZYklIsg:FSTpbqaLfHJflCszOTbdjWR3Nvl

    Score
    3/10
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/Ischeck.dll

    • Size

      120KB

    • MD5

      6c1f65ce96712e05f64c7a26b7adee36

    • SHA1

      6cea6c2618fb31902c52cb1d5fad04503bd34ed0

    • SHA256

      544f3c2c03f7900539d4868437f8e08204c0b4c79357af666a1fb48d406c1ffd

    • SHA512

      5244d26d013dc2c7083bd4c167cac99307985babcabc1806a898a2621fce6b73d256b21d549bce8744f3221a51017ea5f621d2f6f5cd5aae83ec21ae41e5d5a6

    • SSDEEP

      1536:1ki0RcSLEMxwjoTolPh9zyZFTEPmayYgH+t7Q0LtJhpdcOoyoJaZGUttW:IA/VHeZCP3ybHLK3hpdcO1oJaZttW

    Score
    3/10
    behavioral17behavioral18

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      36KB

    • MD5

      6958016193a066833556992077bad4fe

    • SHA1

      5f564945936f99381d7e2408f034f97d069005a4

    • SHA256

      f38c669c87f2a73768a27a01622690997e9d93d5ca3830b349bd24c3ff9f8d2e

    • SHA512

      fd6ab5c341b331b80c940ba97a2cd14547c796933a2df26d3dd87ede1602b86d9f8c37baebd7dd4c68d811199fc96a27ad4cb995bb8889d51af91db9f43ba0a7

    • SSDEEP

      384:IL6T2Izs/XGCanZSwEfj5lwTSYlml89oayKA15JiQNRw/9uosAUdJofiiqd:88Y9gZSwq1lwTS2XA15DRm9cddJo6l

    Score
    1/10
    behavioral19behavioral20

    • Target

      $PLUGINSDIR/LiveChk.dll

    • Size

      36KB

    • MD5

      218d6fd7178e09150907a2e58422ef0a

    • SHA1

      c7110fd386d32481d39c526a2bcae5181893d895

    • SHA256

      2c3e966bfb46d418db62ad63e534ff5bb847c20cca213d9caf9d2e4e667974b2

    • SHA512

      3068c1871b289909a16f4909d070faaabafa3121cd58fd2ffc4d251fd8870d6b996f82aed758047452eb31b27d29bdd10729e584546e066b85f13f6fa3e1f379

    • SSDEEP

      384:4FzC1NotBTadS35gcLiXSquSkyf+Baml/LMfL3m4tuIiXo9lLpSBw8BfiBfU:4+ot5adMgwiXSqu/zMfTdtjao/to8fU

    Score
    3/10
    behavioral21behavioral22

    • Target

      $PLUGINSDIR/SelfDelete.dll

    • Size

      24KB

    • MD5

      7bf1bd7661385621c7908e36958f582e

    • SHA1

      43242d7731c097e95fb96753c8262609ff929410

    • SHA256

      c0ad2c13d48c9fe62f898da822a5f08be3bf6c4e2c1c7ffdf7634f2ca4a8859e

    • SHA512

      8317af5cc3ac802eb095f3fa8cc71daa1265ca58fead031c07872f3d4bb07663a7002ae734fad392a7617f0923fe0caf1f54ed55afdf8516a6a08e202d86fa7f

    • SSDEEP

      96:1dIrJYYrzPpqAAZ9sNIaI2y9WulXEGNRrG:nuYATpq/viyYuEYRr

    Score
    1/10
    behavioral23behavioral24

    • Target

      $PLUGINSDIR/SetHoldData.dll

    • Size

      96KB

    • MD5

      e86d36c5332858061cc519e7bb558f39

    • SHA1

      8114e43152797296ec1919b1c713ebada661ca51

    • SHA256

      4c8869ff8cbdd2f9a6a2d2876194869664d0e3f554886451224ff4e732136365

    • SHA512

      46bf19a71fe2ae4d61084bcf406604e2f375c92f5de1a5e9a6eb857424eb4dc82e70ae7099aa3676c518960f78a17dafa05c23e5283954e43f44190391662ed1

    • SSDEEP

      1536:WLWIcTAacVyVg+h1hT9Uh+uQNIIhVQoJadWytgYT+j:4TlCg+h1xr9IIh+oJadrb

    Score
    3/10
    behavioral25behavioral26

    • Target

      $PLUGINSDIR/UserMgr.dll

    • Size

      55KB

    • MD5

      130f66c0161e6da46744abe3c0be4d9c

    • SHA1

      d2a44a0cd07bc0c5d81fc0d056d6d45d200896ed

    • SHA256

      955705c8c7188d06af16849e5cc3ceae79ea5d0808cc2851630a54d54bbc01f2

    • SHA512

      915b9135da230ec8d3016ba83bd7102b3f8cb13050189a176f8d4d50363f13584fb971226458bc493cd2df27723c8ab7273effab7d6c6e14d49e735d24d7fac8

    • SSDEEP

      768:fThBSJtwQegACHpCygw5eKeK/B/viiTRvTkujLWf2UEHzDSZA7yM5jt/BJE4lV:7SCQeLCHpCyNV9ZTRbkuOQzyMVt/blV

    Score
    3/10
    behavioral27behavioral28

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      acc2b699edfea5bf5aae45aba3a41e96

    • SHA1

      d2accf4d494e43ceb2cff69abe4dd17147d29cc2

    • SHA256

      168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e

    • SHA512

      e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe

    • SSDEEP

      96:M7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgNk32E:eKgfwgcr8zylsB49Ud0qJVgNX

    Score
    3/10
    behavioral29behavioral30

    • Target

      $PLUGINSDIR/processes_second.dll

    • Size

      140KB

    • MD5

      f0a1eae66dd2f54fbe26c26db5493a6f

    • SHA1

      46d56b4c6694da1ec4d88b0a5b153dad02b5dca7

    • SHA256

      8fe4dad8f894bcdb9a83a9d302907de404695be4b50e619afd88f09d72583e69

    • SHA512

      e1b3c946e90fc30b6cdf953c8c7e96121b462bf8529099e0587f7f243b9d73eeba52b510dd2598937f188f7a35bc1e3785b7589ec6c249996a5795c10dafd1e7

    • SSDEEP

      3072:F+WSoWifAbFBgChOQcNg3kirQDNgv3gp9Ibzls8:iAAbFBgChOzNgUrDNgvgp

    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks