Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

02153789f1...94.exe

windows7-x64

7

02153789f1...94.exe

windows10-2004-x64

7

$PLUGINSDI...on.dll

windows7-x64

3

$PLUGINSDI...on.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$TEMP/7068...LR.exe

windows7-x64

7

$TEMP/7068...LR.exe

windows10-2004-x64

7

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$TEMP/7068...R0.exe

windows7-x64

7

$TEMP/7068...R0.exe

windows10-2004-x64

7

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$TEMP/7068...R1.exe

windows7-x64

7

$TEMP/7068...R1.exe

windows10-2004-x64

7

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$TEMP/7068...R2.exe

windows7-x64

7

$TEMP/7068...R2.exe

windows10-2004-x64

7

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$TEMP/7068...UB.exe

windows7-x64

7

$TEMP/7068...UB.exe

windows10-2004-x64

7

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$TEMP/7068...er.exe

windows7-x64

1

$TEMP/7068...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02153789f17145ee577be1cda90513bb4ecd6851211c882ff58e46d9d7ae4e94

  • Size

    510KB

  • Sample

    240309-vwdj2sdb78

  • MD5

    338b2173b98f93539b6e21b9d8167ff7

  • SHA1

    35c459313eb2c5ed9a9a5e535c47728a8c9b76d3

  • SHA256

    02153789f17145ee577be1cda90513bb4ecd6851211c882ff58e46d9d7ae4e94

  • SHA512

    cf8f3480bfe6d0d22980b04610244a8c493267606631d187b4a9ab27011a15ee49c2ac0321f680b4103bcb6f282c547635748b613a388880be80ff9009554b9c

  • SSDEEP

    12288:9B38Xo6peEUBwXVwM9vylzdYvH7Aw5XoR0g46:9BsY8XVNCiH7j4RH

Score
7/10

Malware Config

Targets

    • Target

      02153789f17145ee577be1cda90513bb4ecd6851211c882ff58e46d9d7ae4e94

    • Size

      510KB

    • MD5

      338b2173b98f93539b6e21b9d8167ff7

    • SHA1

      35c459313eb2c5ed9a9a5e535c47728a8c9b76d3

    • SHA256

      02153789f17145ee577be1cda90513bb4ecd6851211c882ff58e46d9d7ae4e94

    • SHA512

      cf8f3480bfe6d0d22980b04610244a8c493267606631d187b4a9ab27011a15ee49c2ac0321f680b4103bcb6f282c547635748b613a388880be80ff9009554b9c

    • SSDEEP

      12288:9B38Xo6peEUBwXVwM9vylzdYvH7Aw5XoR0g46:9BsY8XVNCiH7j4RH

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/GetVersion.dll

    • Size

      9KB

    • MD5

      225f776172f1baccd2721a6e5d512b36

    • SHA1

      2dbbc86f7b0285682880a627b56a75de09f4bed6

    • SHA256

      ecfcbe30f5b248673f9cbebb734b9981ed14b06380ea787c563d67b30e2d069e

    • SHA512

      4b99a5ac68122501a5913cf54bd3ae99d851d57656b0e136980122739cceef739fa2d5ea097f2442068b9489a4c25ea0884653c41d85f27f25996792bf6c21bb

    • SSDEEP

      192:MMr/9XGqK7s/AlHdJZBi46AQ5VuNxHA8/:MsXGqM93Bi46AQ5Vujg8/

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      96KB

    • MD5

      da5be8a2066d67c93265dcd6a9c9dddf

    • SHA1

      8fe968e27e259530dfb435511b1dbe4d167bfda4

    • SHA256

      30dc225ef4a4e084ee65c0912d07abdd939d5a49fb3fda535d6c41ac6b112f0b

    • SHA512

      d7a98903adca16124c538a12ae912432d6ebc1874e9beaddf394004e96a33a58ab68f5f2e2771b83c56cfc53e05e314d4ab79d5c034459d7bcfd31090fd4bf97

    • SSDEEP

      1536:8/fL6f67dFj7xWkdX+zHK7K2h9PORs7dR0h1UgDH40NF:8nL6f67dhxWW00tYwK1UgT46

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/Processes.dll

    • Size

      35KB

    • MD5

      2cfba79d485cf441c646dd40d82490fc

    • SHA1

      83e51ac1115a50986ed456bd18729653018b9619

    • SHA256

      86b302fa9c85dfa0c1c03ba000864a928365dab571f3355347dba02da22949b7

    • SHA512

      cca186a7f9c5cff3f4eca410fbe8cc13dad2514a7e36aec9b1addfbcb239ace9b9b2d8427771858e3fd11783abce7e24d43c286f98da9f8b17562ca095a4c043

    • SSDEEP

      768:uxEiycFoaj/+WSiJfmjvab7L/cUf7IIlMLRF:uxEm7sgfmjy//cgdlM/

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      8KB

    • MD5

      249ae678f0dac4c625c6de6aca53823a

    • SHA1

      6ac2b9e90e8445fed4c45c5dbf2d0227cd3b5201

    • SHA256

      7298024a36310b7c4c112be87b61b62a0b1be493e2d5252a19e5e976daf674ce

    • SHA512

      66e4081a40f3191bf28b810cf8411cb3c8c3e3ec5943e18d6672414fb5e7b4364f862cba44c9115c599ac90890ef02a773e254e7c979e930946bc52b0693aad7

    • SSDEEP

      192:r/QeHNWSvUTfWdXw08LYKFaynLb3MRlbOVlR:7jBvwudT8LJxnnMRlyVlR

    Score
    3/10
    behavioral10behavioral9

    • Target

      $TEMP/7068b811451ac8830f45cd445715746e/downloaderDDLR.exe

    • Size

      58KB

    • MD5

      c7f6ed56312c8fbb58ae6ed445c38df4

    • SHA1

      e2dba94ef052db774478b9f7198c1a2298b334e5

    • SHA256

      fdb8452173a4f116f6e362ab5466c3c16bf6697502fe3d01db0d82f0e339de24

    • SHA512

      ac43e5bb31c3c0876a7768553916cce76d92088e62594e8463b128a0d6e587c48152a5efcf0b2a5e8fb43028d46913df114ae3c3750b7e6c4212c7044518ba43

    • SSDEEP

      1536:tLXB65939tY6HBg4sXJhweErCi/S8qcy4PLv:tLk395hYXJh0C6jy4z

    Score
    7/10

    • Loads dropped DLL

    behavioral11behavioral12

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      a5f8399a743ab7f9c88c645c35b1ebb5

    • SHA1

      168f3c158913b0367bf79fa413357fbe97018191

    • SHA256

      dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9

    • SHA512

      824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977

    • SSDEEP

      192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go

    Score
    3/10
    behavioral13behavioral14

    • Target

      $TEMP/7068b811451ac8830f45cd445715746e/downloaderOFFER0.exe

    • Size

      58KB

    • MD5

      c7f6ed56312c8fbb58ae6ed445c38df4

    • SHA1

      e2dba94ef052db774478b9f7198c1a2298b334e5

    • SHA256

      fdb8452173a4f116f6e362ab5466c3c16bf6697502fe3d01db0d82f0e339de24

    • SHA512

      ac43e5bb31c3c0876a7768553916cce76d92088e62594e8463b128a0d6e587c48152a5efcf0b2a5e8fb43028d46913df114ae3c3750b7e6c4212c7044518ba43

    • SSDEEP

      1536:tLXB65939tY6HBg4sXJhweErCi/S8qcy4PLv:tLk395hYXJh0C6jy4z

    Score
    7/10

    • Loads dropped DLL

    behavioral15behavioral16

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      a5f8399a743ab7f9c88c645c35b1ebb5

    • SHA1

      168f3c158913b0367bf79fa413357fbe97018191

    • SHA256

      dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9

    • SHA512

      824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977

    • SSDEEP

      192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go

    Score
    3/10
    behavioral17behavioral18

    • Target

      $TEMP/7068b811451ac8830f45cd445715746e/downloaderOFFER1.exe

    • Size

      58KB

    • MD5

      c7f6ed56312c8fbb58ae6ed445c38df4

    • SHA1

      e2dba94ef052db774478b9f7198c1a2298b334e5

    • SHA256

      fdb8452173a4f116f6e362ab5466c3c16bf6697502fe3d01db0d82f0e339de24

    • SHA512

      ac43e5bb31c3c0876a7768553916cce76d92088e62594e8463b128a0d6e587c48152a5efcf0b2a5e8fb43028d46913df114ae3c3750b7e6c4212c7044518ba43

    • SSDEEP

      1536:tLXB65939tY6HBg4sXJhweErCi/S8qcy4PLv:tLk395hYXJh0C6jy4z

    Score
    7/10

    • Loads dropped DLL

    behavioral19behavioral20

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      a5f8399a743ab7f9c88c645c35b1ebb5

    • SHA1

      168f3c158913b0367bf79fa413357fbe97018191

    • SHA256

      dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9

    • SHA512

      824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977

    • SSDEEP

      192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go

    Score
    3/10
    behavioral21behavioral22

    • Target

      $TEMP/7068b811451ac8830f45cd445715746e/downloaderOFFER2.exe

    • Size

      58KB

    • MD5

      c7f6ed56312c8fbb58ae6ed445c38df4

    • SHA1

      e2dba94ef052db774478b9f7198c1a2298b334e5

    • SHA256

      fdb8452173a4f116f6e362ab5466c3c16bf6697502fe3d01db0d82f0e339de24

    • SHA512

      ac43e5bb31c3c0876a7768553916cce76d92088e62594e8463b128a0d6e587c48152a5efcf0b2a5e8fb43028d46913df114ae3c3750b7e6c4212c7044518ba43

    • SSDEEP

      1536:tLXB65939tY6HBg4sXJhweErCi/S8qcy4PLv:tLk395hYXJh0C6jy4z

    Score
    7/10

    • Loads dropped DLL

    behavioral23behavioral24

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      a5f8399a743ab7f9c88c645c35b1ebb5

    • SHA1

      168f3c158913b0367bf79fa413357fbe97018191

    • SHA256

      dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9

    • SHA512

      824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977

    • SSDEEP

      192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go

    Score
    3/10
    behavioral25behavioral26

    • Target

      $TEMP/7068b811451ac8830f45cd445715746e/downloaderSTUB.exe

    • Size

      58KB

    • MD5

      c7f6ed56312c8fbb58ae6ed445c38df4

    • SHA1

      e2dba94ef052db774478b9f7198c1a2298b334e5

    • SHA256

      fdb8452173a4f116f6e362ab5466c3c16bf6697502fe3d01db0d82f0e339de24

    • SHA512

      ac43e5bb31c3c0876a7768553916cce76d92088e62594e8463b128a0d6e587c48152a5efcf0b2a5e8fb43028d46913df114ae3c3750b7e6c4212c7044518ba43

    • SSDEEP

      1536:tLXB65939tY6HBg4sXJhweErCi/S8qcy4PLv:tLk395hYXJh0C6jy4z

    Score
    7/10

    • Loads dropped DLL

    behavioral27behavioral28

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      a5f8399a743ab7f9c88c645c35b1ebb5

    • SHA1

      168f3c158913b0367bf79fa413357fbe97018191

    • SHA256

      dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9

    • SHA512

      824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977

    • SSDEEP

      192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go

    Score
    3/10
    behavioral29behavioral30

    • Target

      $TEMP/7068b811451ac8830f45cd445715746e/preinstaller.exe

    • Size

      213KB

    • MD5

      06baef00ae0f0e42fc5fea24fc4eac42

    • SHA1

      9161574590f09cfe4c24498827386ed57f2e8c58

    • SHA256

      19460c3c1b450286c68fba77086c561e740374ae5c44213dd2ec22dc52a430b8

    • SHA512

      29431ff9f16fdd4122a10dfec0f260a4397e776daae2ef17defae71e037f082d48d186a24d229c408c9d1b0b4f02aaeaa69011e44cf399795f9c09903ac51486

    • SSDEEP

      6144:f03ZgLpp6TURimpBwXVUTL7E97IkXQxBRUoz0JehYvq:ZEUBwXVwM9vylzdYvq

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks