Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
702cbafc7ad...99.exe
windows7-x64
702cbafc7ad...99.exe
windows10-2004-x64
7$PLUGINSDI...er.dll
windows7-x64
1$PLUGINSDI...er.dll
windows10-2004-x64
1$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3launch.exe
windows7-x64
1launch.exe
windows10-2004-x64
1wget.exe
windows7-x64
7wget.exe
windows10-2004-x64
7General
-
Target
02cbafc7ad4719018450420528c9af3c89c97c05feaecc0d211da32ccb79e799
-
Size
866KB
-
Sample
240309-wppjeaeh2w
-
MD5
3fe23b6eea62a2dde12bdbf41f08a9f8
-
SHA1
521e2a6fb7e951944d21c7124371e273f7399419
-
SHA256
02cbafc7ad4719018450420528c9af3c89c97c05feaecc0d211da32ccb79e799
-
SHA512
db59d8ec5ef85cff06c43a4897b348f8a5d3fdb6a25316162ae66eacdc6925b080e52645e2c9f959d3d2c7ebc3dfacd5552f74f2017036a4588004e7328d3e13
-
SSDEEP
24576:RueYYFNwOx0CJ75WEcvLlhVN84RUAY4htSB:RuiXwS0s1WEUtJhq
Behavioral task
behavioral1
Sample
02cbafc7ad4719018450420528c9af3c89c97c05feaecc0d211da32ccb79e799.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
02cbafc7ad4719018450420528c9af3c89c97c05feaecc0d211da32ccb79e799.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Banner.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Banner.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
launch.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
launch.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
wget.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
wget.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
02cbafc7ad4719018450420528c9af3c89c97c05feaecc0d211da32ccb79e799
-
Size
866KB
-
MD5
3fe23b6eea62a2dde12bdbf41f08a9f8
-
SHA1
521e2a6fb7e951944d21c7124371e273f7399419
-
SHA256
02cbafc7ad4719018450420528c9af3c89c97c05feaecc0d211da32ccb79e799
-
SHA512
db59d8ec5ef85cff06c43a4897b348f8a5d3fdb6a25316162ae66eacdc6925b080e52645e2c9f959d3d2c7ebc3dfacd5552f74f2017036a4588004e7328d3e13
-
SSDEEP
24576:RueYYFNwOx0CJ75WEcvLlhVN84RUAY4htSB:RuiXwS0s1WEUtJhq
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/Banner.dll
-
Size
4KB
-
MD5
0116a50101c4107a138a588d1e46fca5
-
SHA1
b781dce23e828cf2b97306661c7dad250a6aaf77
-
SHA256
ab80cf45070d936f0745f5e39b22e6e07ba90aa179b5ec4469ef6e2cb1b9ef6b
-
SHA512
55de6aeaad05b01a25828553d3ea9f1b32a8b0c35c42dc6106bed244320e3421ec6a6f5359b15f9d18dd1e9692ca5572b2736d9d48cceb07b9443601d00a5988
Score1/10 -
-
-
Target
$PLUGINSDIR/NSISdl.dll
-
Size
14KB
-
MD5
a5f8399a743ab7f9c88c645c35b1ebb5
-
SHA1
168f3c158913b0367bf79fa413357fbe97018191
-
SHA256
dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
-
SHA512
824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
-
SSDEEP
192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/nsExec.dll
-
Size
6KB
-
MD5
acc2b699edfea5bf5aae45aba3a41e96
-
SHA1
d2accf4d494e43ceb2cff69abe4dd17147d29cc2
-
SHA256
168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e
-
SHA512
e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe
-
SSDEEP
96:M7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgNk32E:eKgfwgcr8zylsB49Ud0qJVgNX
Score3/10 -
-
-
Target
launch.exe
-
Size
26KB
-
MD5
1a333b5e9cf28be2febedfd805e2cf5c
-
SHA1
24c3a57cf6f2553d006a5e03155b056b71e96e0f
-
SHA256
da98a5ab1f2a1437791e5b3fe8eda52c8119ff852a76189fcfc2e8e2bb5b2ee2
-
SHA512
42b2ce79719f616dd5623e28fe8bef5318a0dce9b67537907f459e9d960921f0df12b3d253dd4366184b0b0cd686d72de6c3ecf52a133843a460a44bf0fdbe91
-
SSDEEP
384:onmRRfPH0j4Q7fnbOJ1aDS3aloab27ThiXhrOHfcXLCDgHBLSHVm:omj8jzD/lfbidfhwBLSI
Score1/10 -
-
-
Target
wget.exe
-
Size
392KB
-
MD5
bd126a7b59d5d1f97ba89a3e71425731
-
SHA1
457b1cd985ed07baffd8c66ff40e9c1b6da93753
-
SHA256
a48ad33695a44de887bba8f2f3174fd8fb01a46a19e3ec9078b0118647ccf599
-
SHA512
3ef1b83ea9821cb10f8bc149ec481d1e486d246a0cb51fe7983785529df42c6fe775e0d35c64a97f997cdf294464c7640df392239b96ce1be6143ce8f07b5a8a
-
SSDEEP
6144:eoxkuaVJiysgokd+8L2LZ9aUedgk+TGk57rrpmNDEpO/YIPOWCiwYFnY:JxkJLiynXvqjggpl57rrpmNQp2YIGRY
Score7/10 -