Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3Language/Multi_ch.dll
windows7-x64
1Language/Multi_ch.dll
windows10-2004-x64
1Language/M...G5.dll
windows7-x64
1Language/M...G5.dll
windows10-2004-x64
1Language/M...GB.dll
windows7-x64
1Language/M...GB.dll
windows10-2004-x64
1Language/M...ng.dll
windows7-x64
1Language/M...ng.dll
windows10-2004-x64
1lpk.dll
windows7-x64
7lpk.dll
windows10-2004-x64
7setting.dll
windows7-x64
1setting.dll
windows10-2004-x64
1setup.exe
windows7-x64
4setup.exe
windows10-2004-x64
4General
-
Target
9a739ee2e12554975431301ee6ed17e6
-
Size
1.0MB
-
Sample
240214-b6h3qsfb87
-
MD5
9a739ee2e12554975431301ee6ed17e6
-
SHA1
3a402256acf972ec79e1382fcaf827eb1c2c20c3
-
SHA256
283765c310eff2ec907eb802484f6b9e6abc80436e7f1318aa1554d058aa8192
-
SHA512
e736cba2b101878b17881e8dff82d5cb335cd3ba638cf3c44255cf6dde2c4acb84313c3ac2a52838730a4857643f1079a62ba7a0324ca339933eac798b65897b
-
SSDEEP
24576:5dxymm2BluuJKd3oJ00KcYSSMkB1tE4oUTQ5l+pHxdTNVExWKJ:5dxylEjJKpMOSSMsiHmLXNylJ
Static task
static1
Behavioral task
behavioral1
Sample
Language/Multi_ch.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Language/Multi_ch.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
Language/Multi_ch_BIG5.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Language/Multi_ch_BIG5.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
Language/Multi_ch_GB.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
Language/Multi_ch_GB.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
Language/Multi_eng.dll
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
Language/Multi_eng.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
lpk.dll
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
lpk.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
setting.dll
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
setting.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
setup.exe
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
setup.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
Language/Multi_ch.dll
-
Size
9KB
-
MD5
a9857675c3546cc533d49d359137a8bf
-
SHA1
9ba4ef09e551a7b273925ec87d6f49f6067761c6
-
SHA256
0d4ce592404da0ce347a578fbd96b4bc8fe61bde47f10cd88aa7f631950958cb
-
SHA512
cb4e5ffd95b5c2547c14358b07ebdef42542332d74fd058e5e45f7002bf343c4101bec3a1a876233347888c8addd4e5b79401d3800247f82a75f4329f150edcf
-
SSDEEP
192:K6JGdDwFM1hU3gNWvl7hdDwQM1hU3gNWw7m5Z:K6JU2ywt7/1yww7m5Z
Score1/10 -
-
-
Target
Language/Multi_ch_BIG5.dll
-
Size
9KB
-
MD5
1dae62035890104bdfb19af40a7e41b7
-
SHA1
108c4593422f0c9c15dac603f3f93f4461d42c12
-
SHA256
3155fb9243324063e3c28099d88ac3617cb86c84f400d8b752a8ab554da44fcc
-
SHA512
539737f7c20bfc160fb6c754a2fcc092a12202521cd84f03422b5612ea4349f943ff46159cd14446ab036652a1f23d80ad030c9437ce15b27423f4eb47c11555
-
SSDEEP
192:V6aiMGIXvUZ/Pi9io0n5y17B1Vhr63IIXvUZ/Pi9io0n5b17B1Vhr63Xye:V6TMjH05yVdh8H05bVdhAye
Score1/10 -
-
-
Target
Language/Multi_ch_GB.dll
-
Size
9KB
-
MD5
a9857675c3546cc533d49d359137a8bf
-
SHA1
9ba4ef09e551a7b273925ec87d6f49f6067761c6
-
SHA256
0d4ce592404da0ce347a578fbd96b4bc8fe61bde47f10cd88aa7f631950958cb
-
SHA512
cb4e5ffd95b5c2547c14358b07ebdef42542332d74fd058e5e45f7002bf343c4101bec3a1a876233347888c8addd4e5b79401d3800247f82a75f4329f150edcf
-
SSDEEP
192:K6JGdDwFM1hU3gNWvl7hdDwQM1hU3gNWw7m5Z:K6JU2ywt7/1yww7m5Z
Score1/10 -
-
-
Target
Language/Multi_eng.dll
-
Size
9KB
-
MD5
6b02f43484ca1be79f97bd2274ac049e
-
SHA1
b1c4f9e0f15a56df6f4d2b2ebc5faa2362c29770
-
SHA256
9e1c56ffe3ed1f3e4c3d58f6756dfad157f06ce8932c5f7f2d4a8f9b4e0a2225
-
SHA512
3a042f62812a0d229d5bc942c3fd2058ddeea3e0a8b3b8f49e40d32bd558b1a6e04155ca4c51448618e21491a5f13f105f6d8a99df9e4203d17f855b8371f9e4
-
SSDEEP
192:OkI96eIajeFZBDBjqPr6odb9+UUcaSyVbnsB/MtVWpSpM:OkI96IyFZp966op9Q7VnsBEtVWpSpM
Score1/10 -
-
-
Target
lpk.dll
-
Size
45KB
-
MD5
253047ba1fb3f5780f656e42468a98b6
-
SHA1
41df12eff92915354f6870ece0fe09c03e96eaa4
-
SHA256
5ab6d1bc176cc636e82dca6c557c49d06f06016d829aca6cec4761624231ce6d
-
SHA512
1866f515851eaa71c4213a4680f239b88b38e88371a3414e3f7079321b740e45fa36c96304eb55e09c16a83532b4fa4c466f5fd3bf947e46cfcd8cb4c96b6dc3
-
SSDEEP
768:tojY9P93amUkTe2uVf8VPZUpRwqK8RPRDUbojyH6ojY9P:Ym1a9iexVfevagojyHDm
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-
-
-
Target
setting.dll
-
Size
29B
-
MD5
e7750f1ca97ab8dce4052948bd2edd6f
-
SHA1
a27413430b8f782ccb8ba6bcf5f11a9928e0535c
-
SHA256
b6a40c7cd04ca11ed95495e089a69e56f799fabf0f39568f4ee7bb19ae49d769
-
SHA512
5b36b9459730b19e7485ea7d882e4ca132197493d8d33616618e3646b30b782001682dcab5f02c24ca22cf2d76c97d99098b17440937c54d10bbd40a8eb39228
Score1/10 -
-
-
Target
setup.exe
-
Size
9.1MB
-
MD5
65c2f0e8208f0779b238d719664b6ac6
-
SHA1
ccbc664b65dcd8bd7e5d9d866235016dc560b804
-
SHA256
75a6aa0aae4288e19c3d3f124b247df66ff5d108b510bc0db8b193089ddc7524
-
SHA512
7edb6bda84183feddd52d52a83036aaa3fed88f8ed743474fc76f461f75ac06f6aeef5e5649a3d21f00cc6e6a647806915efb89d6e77a1a70181df1a47b7ed79
-
SSDEEP
98304:CdtMhYuFNNMNRfuFNdsIBOhYuFNNMrfuFNdsXLuFNNMcfuFNdshU:m6nFgaFQTnFgSFQSFgfFQ
Score4/10 -