Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

windows_10...64.exe

windows7-x64

7

windows_10...64.exe

windows10-2004-x64

7

$PLUGINSDI...ns.ini

windows7-x64

1

$PLUGINSDI...ns.ini

windows10-2004-x64

1

$PLUGINSDI...al.ini

windows7-x64

1

$PLUGINSDI...al.ini

windows10-2004-x64

1

$PLUGINSDI...er.bmp

windows7-x64

3

$PLUGINSDI...er.bmp

windows10-2004-x64

7

$PLUGINSDI...rd.bmp

windows7-x64

3

$PLUGINSDI...rd.bmp

windows10-2004-x64

7

bin/config6

windows7-x64

1

bin/config6

windows10-2004-x64

1

include/gr...raph.h

windows7-x64

3

include/gr...raph.h

windows10-2004-x64

3

include/gr...text.h

windows7-x64

3

include/gr...text.h

windows10-2004-x64

3

include/gr...yout.h

windows7-x64

3

include/gr...yout.h

windows10-2004-x64

3

include/gr...Data.h

windows7-x64

3

include/gr...Data.h

windows10-2004-x64

3

include/gr...rith.h

windows7-x64

3

include/gr...rith.h

windows10-2004-x64

3

include/gr.../cdt.h

windows7-x64

3

include/gr.../cdt.h

windows10-2004-x64

3

include/gr...raph.h

windows7-x64

3

include/gr...raph.h

windows10-2004-x64

3

include/gr...olor.h

windows7-x64

3

include/gr...olor.h

windows10-2004-x64

3

include/gr...geom.h

windows7-x64

3

include/gr...geom.h

windows10-2004-x64

3

include/gr...sion.h

windows7-x64

3

include/gr...sion.h

windows10-2004-x64

3

Resubmissions

23/02/2024, 14:34

240223-rxp3paca7y 7

25/01/2024, 16:04

240125-th1a8abbek 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    windows_10_cmake_Release_graphviz-install-8.1.0-win64.exe

  • Size

    4.8MB

  • Sample

    240223-rxp3paca7y

  • MD5

    54ecf446aadefeefc670db219d24aa42

  • SHA1

    6ea3f6fea9eb7e6742fe6860f2eb32ede4bf1160

  • SHA256

    e8f18a59a3c4a7b9d8f00c203d1c3cecb8b2353d79ba6546e78084796e36f56f

  • SHA512

    4ddba7e8c9b09ee816c475f84b803508b72312565a2cb310ac6e9b4982cde915b7b5ab9eb401059ff3bd4a8bccdb5240aa4b4495267b5d68275729b166b6c2f9

  • SSDEEP

    98304:iqPJFh3lBUKHpHYfB44ktUMnF7P9sPu1UYl+AfUVihNE3:dJD3TXVY51MnF7emoBIW

Score
7/10

Malware Config

Targets

    • Target

      windows_10_cmake_Release_graphviz-install-8.1.0-win64.exe

    • Size

      4.8MB

    • MD5

      54ecf446aadefeefc670db219d24aa42

    • SHA1

      6ea3f6fea9eb7e6742fe6860f2eb32ede4bf1160

    • SHA256

      e8f18a59a3c4a7b9d8f00c203d1c3cecb8b2353d79ba6546e78084796e36f56f

    • SHA512

      4ddba7e8c9b09ee816c475f84b803508b72312565a2cb310ac6e9b4982cde915b7b5ab9eb401059ff3bd4a8bccdb5240aa4b4495267b5d68275729b166b6c2f9

    • SSDEEP

      98304:iqPJFh3lBUKHpHYfB44ktUMnF7P9sPu1UYl+AfUVihNE3:dJD3TXVY51MnF7emoBIW

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/NSIS.InstallOptions.ini

    • Size

      651B

    • MD5

      7db6ae6fb6e11ce14465c21470cc5080

    • SHA1

      2d425f7336553c474c61e7802b0141299d85e9a6

    • SHA256

      f9e0b0fcd3cf9dfabee7f9a7542e3831d22f49312584088516402a420f19ae84

    • SHA512

      2a5e0668f207e501f74c355dd6c055fcdc0e4f0d0281610cf6cbdf03b94ff7ea19cf1fc06ff7f481b3cd8fe94553bc4d0a1f13c13d5112bca53198dd90d507ca

    Score
    1/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/ioSpecial.ini

    • Size

      211B

    • MD5

      e2d5070bc28db1ac745613689ff86067

    • SHA1

      282e080b4cf847174c5c11e4f9157b8c338ecb19

    • SHA256

      d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0

    • SHA512

      a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de

    Score
    1/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/modern-header.bmp

    • Size

      9KB

    • MD5

      940c56737bf9bb69ce7a31c623d4e87a

    • SHA1

      f2f3b4e7b9c28df6687ceeaed300a793e3bac445

    • SHA256

      766a893fe962aefd27c574cb05f25cf895d3fc70a00db5a6fa73d573f571aefc

    • SHA512

      81c60431619d7eb826b8da997c227c4f7077cc754caa15df6e0e7ae0e33690432bc2a27a7e295998f15e33a17b3d80e492d7cc09fd70dc43daf1cfe86b8746ff

    • SSDEEP

      192:TYw3C/LSnMoejFXnknIHbGoijTr3dBZ9KPPsnY/T0x9j:TY3LSnlepnknIHKoUrdBZ9uPsY/Ix9j

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral7behavioral8

    • Target

      $PLUGINSDIR/modern-wizard.bmp

    • Size

      25KB

    • MD5

      cbe40fd2b1ec96daedc65da172d90022

    • SHA1

      366c216220aa4329dff6c485fd0e9b0f4f0a7944

    • SHA256

      3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2

    • SHA512

      62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63

    • SSDEEP

      24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral10behavioral9

    • Target

      bin/config6

    • Size

      2KB

    • MD5

      66525f8f3bf36e949a969b85bb1eda0f

    • SHA1

      f8ed20c21720c3a541c6f49412c5e3055ffb5e65

    • SHA256

      86e68d64c93a1a4d1613510d36f2a3e228d8275635a58008bd69a96ab46ca796

    • SHA512

      fa7234fd0f6bcda784616679859cbab95fc681b90f69d74252cb61990bc6d6ae8e07e9f016f50dc80d8370badeff882233b5b8b68a59195f36310f8e525d9361

    Score
    1/10
    behavioral11behavioral12

    • Target

      include/graphviz/AGraph.h

    • Size

      1KB

    • MD5

      9213be9b76f721e8b3dacda0afdb5d34

    • SHA1

      aca49c01c1c230433093bcc140e26db3e40cf455

    • SHA256

      c5027b602d76f30168d3f3325331f5e6a05e87f46696ad8ca2f0287babdde718

    • SHA512

      92503068d04ed22ed05df4e98e6412d8c59b173b7c7e49c0c7b86f903491afb4a300c8725ec8e99626f89b7577b8d1b51ccadfac69611d411ffad5aa700eb621

    Score
    3/10
    behavioral13behavioral14

    • Target

      include/graphviz/GVContext.h

    • Size

      1KB

    • MD5

      5c16796f2c126db74e132119778e2fdf

    • SHA1

      efa86c05a7dabd3992bef2a2487d77df87fc0c12

    • SHA256

      d9508d29f71fadab8d7fca83b5637795414ff74fa4fadae9714ac657dcbb27f9

    • SHA512

      6e7cb4894dd9fdd73e6a4d11fe8a8122bb1e0b28bd639024953ecf20bb074909ef4357ed484d440c2a435ba7424be50cbc7bca1a2e8fe114adab1f9addfeedc8

    Score
    3/10
    behavioral15behavioral16

    • Target

      include/graphviz/GVLayout.h

    • Size

      1KB

    • MD5

      e5080449e1d74700a24f3e32248dd97a

    • SHA1

      5d86370028e413f039b7a31a417187aad38bc4d1

    • SHA256

      0a2dfd08bc95be17317c26c19f009ff9cdbcef40f5a3f2ce1412c3e0dcff8bfa

    • SHA512

      1fa09cca111eac1facb9c8c024e1d1f987ef93f7a279ba29d915f12aab0d2b4aae1f5999c5d681b892f9d7c3aef3c899bad562430c4a1564986deed4a5401313

    Score
    3/10
    behavioral17behavioral18

    • Target

      include/graphviz/GVRenderData.h

    • Size

      1KB

    • MD5

      a1e203d032345049d7f49c578a11a7de

    • SHA1

      9970a5ab813c5eb32391ef56390c6727c076680d

    • SHA256

      b3aa11404ee808febd739fa0a6bb32cb68b164d90bd20c25bb1812f344133cc4

    • SHA512

      ccb131db05da34a2f1e50021caf8dc39e983dd11d26d9a52616e62688013123bc6dcc6f6ca8bb85e8a22d4325951fba66294ef8473248e36b818417f4d8c6ceb

    Score
    3/10
    behavioral19behavioral20

    • Target

      include/graphviz/arith.h

    • Size

      1KB

    • MD5

      b4d5c378c29316b445ec77fdf4f48c2e

    • SHA1

      1f62df755d4b67f55e35469fbab120833bf6abc2

    • SHA256

      8c543470da3bdecd1a012a79618f4edbc8ef8f97af98435b09c9a0aaeef6a9db

    • SHA512

      2013418b2487220029823d8a7eaccb18776736e07c397be6cb0bf4be4524c500ac484c3105ce1749835722943d138be858e20e78483eb294f774e6a0db42a587

    Score
    3/10
    behavioral21behavioral22

    • Target

      include/graphviz/cdt.h

    • Size

      10KB

    • MD5

      dc01d3bd3ff84be7470b319574472922

    • SHA1

      a97a5bdcf53363f611f014edecf2798361b60b02

    • SHA256

      613df36c43b370d312d5fe00980b088cc2459412db5c50d3616fc93f0d47a11c

    • SHA512

      3f238d58ca91c00cc8e79c431930dd2f7ad254162d843ce3f5cfc980b5f546d0404f2f11a9c0b9a888ff30f2edcb7acd128511a7c54998557b69bc5795581898

    • SSDEEP

      192:xBTkxMZj+xkHBdoAadGqq7ksdErI8hErIfJgvgvgfg0gpglghgagNgKgygBgNgwb:xB4xMJ+xWBdoHdpH2EbhEwJgvgvgfg0n

    Score
    3/10
    behavioral23behavioral24

    • Target

      include/graphviz/cgraph.h

    • Size

      19KB

    • MD5

      b814700db4f21d2caf790bafa285d5be

    • SHA1

      d37391745ffe892c05859a022da6a07198c13677

    • SHA256

      2082d67f5aee62d59e6d7d41a69b563a586baf0c8e934acf896e971a1774d92c

    • SHA512

      f024cbaa693f79469fc0574bdf53008e50580fe81301d3ea787529e719e46a697a5baf12b079309e5c88079732579154d9604e215f4aef126c52479c0cf2582e

    • SSDEEP

      192:r35xbBySCAcmlrkeMyEcXbNsAfzsWfV4KeZZrV5E5olNIqUMP:75xKCMgNz/mrjSwf

    Score
    3/10
    behavioral25behavioral26

    • Target

      include/graphviz/color.h

    • Size

      1KB

    • MD5

      e69b85d0dcd9a53009fad03162f19465

    • SHA1

      bbbabcbcd8f17ceba30d3b8ddc36e96b6207e5f8

    • SHA256

      92cfd3939c17575b3891bc454b69f39292eb3508837ca43d731b5f64aeb3051e

    • SHA512

      9bb1a49377e9c9f1861657451c55492c275b57a298422e988f953badd9490e5cbc5306359f7dbf97fd34a0a228d5aa7350cb50e3416ef3ee1152edae777015a6

    Score
    3/10
    behavioral27behavioral28

    • Target

      include/graphviz/geom.h

    • Size

      2KB

    • MD5

      d9a3336dd4b68ad8ab4f7aa8d88ae1c7

    • SHA1

      219b36d912bca59a1a1c2b4fc22d03d112243468

    • SHA256

      e2709e9a05aa064ca24257cf5729506aa981f718f2f2aa0b0265193286199873

    • SHA512

      f911b7847e35589c5b349b7235149b7a1d0d492a1fa9ab8a2eda99cb981f27b22a36ec247b51570917f63bf2a444a8ee9d5bf482efc74372107f0f2b66907c47

    Score
    3/10
    behavioral29behavioral30

    • Target

      include/graphviz/graphviz_version.h

    • Size

      324B

    • MD5

      14276ba8ce7f3480e65042ee3ad9f625

    • SHA1

      afd2297a00736515789f2618cfbfa47b4a98fc4b

    • SHA256

      dd254088a01396b339dddd9b46ed34d663fe4dabd7362a3c1a4a9509b0e98f98

    • SHA512

      119b084f9537f5fb6ae07429c9eb3eb6b331d2877a1fafad6fe586153fd8d9f929b1fb4abc5bc6e4d41d7347a9901cb3cce69aeae0b8e50b09c1f34a6ac7f155

    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks