Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

bd233208f1...b3.exe

windows7-x64

7

bd233208f1...b3.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows7-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$PLUGINSDI...ry.dll

windows7-x64

3

$PLUGINSDI...ry.dll

windows10-2004-x64

3

Extensions...64.dll

windows7-x64

1

Extensions...64.dll

windows10-2004-x64

1

Extensions...ip.dll

windows7-x64

1

Extensions...ip.dll

windows10-2004-x64

1

Extensions...TP.dll

windows7-x64

1

Extensions...TP.dll

windows10-2004-x64

1

Extensions...le.dll

windows7-x64

1

Extensions...le.dll

windows10-2004-x64

1

Extensions...AR.dll

windows7-x64

1

Extensions...AR.dll

windows10-2004-x64

1

Extensions...ry.dll

windows7-x64

1

Extensions...ry.dll

windows10-2004-x64

1

Extensions...ls.dll

windows7-x64

1

Extensions...ls.dll

windows10-2004-x64

1

Extensions...or.dll

windows7-x64

1

Extensions...or.dll

windows10-2004-x64

1

Extensions...in.dll

windows7-x64

1

Extensions...in.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd233208f1839c8f352f97de36b36bb3

  • Size

    6.5MB

  • Sample

    240309-3y9z2afa3w

  • MD5

    bd233208f1839c8f352f97de36b36bb3

  • SHA1

    2d4080d0fa4176dda7d9ca7d985e2956aaf65a93

  • SHA256

    630a76310508c5aa4cde07bd19374129306618751e71301673af4b77e8daec77

  • SHA512

    e2a614d4f65c5c37cdf871c40bad95fdfd6997dbfb1281ab5340f1eab909cf5a42fd3330a449617d2743219d476650bd2475cc5d31c0ebd2f1b30cea5c31b8b7

  • SSDEEP

    196608:HvOr8+kIIFthsGUNJdNZ/mAvKf6GZhk547:G8utfdNZ/m43Ik5o

Score
7/10

Malware Config

Targets

    • Target

      bd233208f1839c8f352f97de36b36bb3

    • Size

      6.5MB

    • MD5

      bd233208f1839c8f352f97de36b36bb3

    • SHA1

      2d4080d0fa4176dda7d9ca7d985e2956aaf65a93

    • SHA256

      630a76310508c5aa4cde07bd19374129306618751e71301673af4b77e8daec77

    • SHA512

      e2a614d4f65c5c37cdf871c40bad95fdfd6997dbfb1281ab5340f1eab909cf5a42fd3330a449617d2743219d476650bd2475cc5d31c0ebd2f1b30cea5c31b8b7

    • SSDEEP

      196608:HvOr8+kIIFthsGUNJdNZ/mAvKf6GZhk547:G8utfdNZ/m43Ik5o

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      325b008aec81e5aaa57096f05d4212b5

    • SHA1

      27a2d89747a20305b6518438eff5b9f57f7df5c3

    • SHA256

      c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b

    • SHA512

      18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf

    • SSDEEP

      192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/UAC.dll

    • Size

      17KB

    • MD5

      88ad3fd90fc52ac3ee0441a38400a384

    • SHA1

      08bc9e1f5951b54126b5c3c769e3eaed42f3d10b

    • SHA256

      e58884695378cf02715373928bb8ade270baf03144369463f505c3b3808cbc42

    • SHA512

      359496f571e6fa2ec4c5ab5bd1d35d1330586f624228713ae55c65a69e07d8623022ef54337c22c3aab558a9b74d9977c8436f5fea4194899d9ef3ffd74e7dbb

    • SSDEEP

      384:59TzaeW+WyB8c7LX+OGkrwWvVrkUiEMAWm5nskAvXkq:5ZaB+W62Mr5vGUiEum5sk

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      c10e04dd4ad4277d5adc951bb331c777

    • SHA1

      b1e30808198a3ae6d6d1cca62df8893dc2a7ad43

    • SHA256

      e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a

    • SHA512

      853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e

    • SSDEEP

      96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/nsProcess.dll

    • Size

      4KB

    • MD5

      05450face243b3a7472407b999b03a72

    • SHA1

      ffd88af2e338ae606c444390f7eaaf5f4aef2cd9

    • SHA256

      95fe9d92512ff2318cc2520311ef9145b2cee01209ab0e1b6e45c7ce1d4d0e89

    • SHA512

      f4cbe30166aff20a226a7150d93a876873ba699d80d7e9f46f32a9b4753fa7966c3113a3124340b39ca67a13205463a413e740e541e742903e3f89af5a53ad3b

    Score
    3/10
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/registry.dll

    • Size

      24KB

    • MD5

      2b7007ed0262ca02ef69d8990815cbeb

    • SHA1

      2eabe4f755213666dbbbde024a5235ddde02b47f

    • SHA256

      0b25b20f26de5d5bd795f934c70447112b4981343fcb2dfab3374a4018d28c2d

    • SHA512

      aa75ee59ca0b8530eb7298b74e5f334ae9d14129f603b285a3170b82103cfdcc175af8185317e6207142517769e69a24b34fcdf0f58ed50a4960cbe8c22a0aca

    • SSDEEP

      384:W2mvyNjH3rPnAZ4wu2QbnC7qB7PnrvScaeYA4CIDEge/QqL2AQ:/75w/OfrzB4CUxuQfA

    Score
    3/10
    behavioral13behavioral14

    • Target

      Extensions/FS7Zip/7za_x64.dll

    • Size

      361KB

    • MD5

      fe74068392db9689d86ef345a83c6fda

    • SHA1

      767cecd40a35ac8c5a674809a5bf29999f347c8a

    • SHA256

      dd8e84de8e9b22d0263adfbc707f9a012900b9e2f12c96e150bcc4bf07d0d606

    • SHA512

      a34139b2a8aecbb659f44f38826704b23b26485a24950fa99487d0482cbec00026fe7eb695a58677eebe7a1e9dcd8d3cfa2ba083b44a5c77d4d1ca09fb58acb6

    • SSDEEP

      6144:KD4CRjKKCVVtY0AumuceNrBASkTh7nN+nzSydzBx:KETtY0AuTNrBV20nz

    Score
    1/10
    behavioral15behavioral16

    • Target

      Extensions/FS7Zip/FS7Zip.dll

    • Size

      192KB

    • MD5

      35e9c8b6d49e8d5df9e857478798fa18

    • SHA1

      8f050fec7546c765c93cd42ba27cc90741b60d9e

    • SHA256

      d410555a60c8219a0b13e4a0179843a5eda81ed22d1d36be58a0bcb359623e81

    • SHA512

      d5d6f31cef6cb57c66438bea783242a10cc84dc6da1835a138e72fb28d65e32dd448a611a0d40838b5537e389ef61c96f2c79ff25aefce820e04fd554f048499

    • SSDEEP

      3072:09sTq4XCDcvmDCzt/TdF1IlHhCnRpvgKH4kiD+JUCTrR0w5kPW3sz:09sTVSIeDQNTRIlsnHYKQ4TrWJW3

    Score
    1/10
    behavioral17behavioral18

    • Target

      Extensions/FSFTP/FSFTP.dll

    • Size

      373KB

    • MD5

      fc918a2f4e267fd438e073cbb78c2cd0

    • SHA1

      422687bbae1d34e837a3ad1044eb9993e598bc52

    • SHA256

      2c157fe22793a9d5f3bfaf2c96a664c3a2f3281d15a2ff11f7db2f71268ef327

    • SHA512

      2df54977110609f3db2c64db8f9881fb777312795e6bd3d31fc06dbcf02b1dbc69769c6f238e66a95e7206a13d9da9e64544d826337d844090a8231744063874

    • SSDEEP

      6144:ECeeGlFKqeXPwkiVTo45R4J7ENHTpW8w9IiLTTdmwyypcsldSgqF86VZI:IFKqMPFeo4QkwKsMcldy

    Score
    1/10
    behavioral19behavioral20

    • Target

      Extensions/FSPortable/FSPortable.dll

    • Size

      282KB

    • MD5

      6a011ecad827e3c253bebf4e7f412355

    • SHA1

      4f540d7a8cf678b3e01fd57fd0215fa620878eaa

    • SHA256

      d623bcd7b7723ec095b166667c5d6057c25651cf33ccc5a4b32097442340e913

    • SHA512

      f4a9051692bad8d30f35e7bf3d601482fd2f7d4570512c26f0ac60dc14c1cc16717d22c88a37756b3c2a0343e493621acce022ff2af7accd7d49ae8f45a4e3a1

    • SSDEEP

      6144:v6D3nhsNxOwYNtNm1fR4wyTOxtDQyYoXTnfZ+C/a7iXf215b8lI0hO:vFYNQfDvJMy215wS0

    Score
    1/10
    behavioral21behavioral22

    • Target

      Extensions/FSRAR/FSRAR.dll

    • Size

      317KB

    • MD5

      2f036c68456348496d718a982b7567b7

    • SHA1

      cef3c5ae35cee2beef0a6d8fe97020fcae7720d6

    • SHA256

      7e746c6cb88ca6e56e821d7bd9cb7beae7662b0f43c15020ba637a95f6c33d65

    • SHA512

      66b8d244503fd152c905617998dffd4a87af8cff62698d413b436ec591b063d3c61c1070e0618be882968e5682d546089a6b0f4536952f27177d4354981f094c

    • SSDEEP

      6144:iDycebdAhYdj+sAchflno9FeO+Tmhn6qCN5UJqfJnM:f5edcfhL5U

    Score
    1/10
    behavioral23behavioral24

    • Target

      Extensions/FSRegistry/FSRegistry.dll

    • Size

      222KB

    • MD5

      d0873c7717d94dfb81d83d2a81f2ea9c

    • SHA1

      620a24458761d6b298cc7fe63e73018cbbaa12d8

    • SHA256

      210ecddc8f1f2450ea191b2e381a393bbedfdebbad78c24708055294de76ddfc

    • SHA512

      dd741ad3de48bdb0a3b1112ea379da2d5dbf82f755cb45e838fd5e4155468e4cd506550762e0a3ecbc1d30a3d4b698ade38778fa5ed79899729f57bf5ceedce9

    • SSDEEP

      6144:Eqhl7L0D8Sfs8fPWGTkfP+K5iclGiMV1Yuv:EVD+8f6aiy

    Score
    1/10
    behavioral25behavioral26

    • Target

      Extensions/MCAudioTools/MCAudioTools.dll

    • Size

      859KB

    • MD5

      b393ea22052884f751304b336fc6e205

    • SHA1

      3b878cedb859632a7c26e8a395277dc1decd0c5b

    • SHA256

      a0007bd3b672fd1239beb1a1630386dba946f2e1eb2c33b8ea12782ce8e4f66e

    • SHA512

      bb4201dfd63f4c8cb4aa4cf7af3eb264d42ff334df31bbe46a007dc6d17009c0f14d403a39107de151e37a4b244895dd42e4d4c28d408d4eaee3a1600509ccf2

    • SSDEEP

      12288:eOj56573FuogPYiuVBgAjrfxsgTKyYRdwco9Hi:eOj5oFuyVTf1TKyC+D9

    Score
    1/10
    behavioral27behavioral28

    • Target

      Extensions/MCLanEditor/MCLanEditor.dll

    • Size

      264KB

    • MD5

      e9f805328e6acfcd9c2c1a707f2db964

    • SHA1

      599b177079328ae780197d4e78d71c298e9a4c1b

    • SHA256

      740a55cad3f440d734cc6e5c9569aba1c8aa8b9b39dc200c8943e01955c08aa4

    • SHA512

      077ff2e3bab4ba566849da89a839671257d99b9d2996586615517ba5193f4e8bce64d2dd6c52d514539f0b3cc05f339a4f60bbfa6452598468976f4f64f2db3f

    • SSDEEP

      6144:paSeXDG8uYNXyonpnHerxrLZVwEMi39cZ26fGMk2Egz48OB6OTzGCHNbrMyeoVmB:pZ0yLICS5+rxrLZGEMi39cZLrk2E9HuU

    Score
    1/10
    behavioral29behavioral30

    • Target

      Extensions/MCPictureTools/ExifWin.dll

    • Size

      390KB

    • MD5

      9312dcb239e830ec03e62c06405d7430

    • SHA1

      34de8e8c74a1cd1134c8ecd6427c289ffc51f50b

    • SHA256

      bb51b35eeea48b0aa94e1f4f6c0654f75743db2deb4190d29a7f1c74243fc78b

    • SHA512

      4f10c536882350ee295290285b4f3c15ce44ac04a96ee9a4e610a59b4512e09b3626fe08489ace610731038e2c037a157e3d6983686799afdb02ebdf77606e60

    • SSDEEP

      6144:AuIj1H+ID3roKlG7lNHysZShVWx3kWZORayeh2L/AphrYA:wHJcf3ywVkWDj

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks