Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
1003a948c55d...3c.exe
windows7-x64
903a948c55d...3c.exe
windows10-2004-x64
9$PLUGINSDI...nt.dll
windows7-x64
3$PLUGINSDI...nt.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...ry.dll
windows7-x64
3$PLUGINSDI...ry.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...ms.rtf
windows7-x64
4$PLUGINSDI...ms.rtf
windows10-2004-x64
1$PLUGINSDIR/inetc.dll
windows7-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
3$PLUGINSDI...ay.dll
windows7-x64
9$PLUGINSDI...ay.dll
windows10-2004-x64
9$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...it.dll
windows7-x64
9$PLUGINSDI...it.dll
windows10-2004-x64
9$PLUGINSDIR/utils.dll
windows7-x64
3$PLUGINSDIR/utils.dll
windows10-2004-x64
3General
-
Target
03a948c55d5867c9d6a004819ab5a157825ad1e75fd2239d2040d0f12251f83c
-
Size
511KB
-
Sample
240309-ya9xxagh8y
-
MD5
068d57374cb8cee0f691955861de41cc
-
SHA1
43df504ab44f7eaccbe2d348fb94160a90659acc
-
SHA256
03a948c55d5867c9d6a004819ab5a157825ad1e75fd2239d2040d0f12251f83c
-
SHA512
6534cd92d7480577e4b1f41cf78cb8a61a6aed9d813a98d1eee27ce0b71ff8f3dd8c53f25f4375d1e0862a8a8cf957a47e4570cc0ec0a5be080f8596d0fc4a2e
-
SSDEEP
12288:5imgrxHgqdfpkfBkd8jVGpUGOJR2pUpLiIWWzL1e5m:0NyqJpkqd892GL/145m
Behavioral task
behavioral1
Sample
03a948c55d5867c9d6a004819ab5a157825ad1e75fd2239d2040d0f12251f83c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
03a948c55d5867c9d6a004819ab5a157825ad1e75fd2239d2040d0f12251f83c.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/ButtonEvent.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/ButtonEvent.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/Registry.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/Registry.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/ThreadTimer.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/ThreadTimer.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/iminentv2_terms.rtf
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/iminentv2_terms.rtf
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/inetc.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/nsArray.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/nsArray.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240215-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/nsRichEdit.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/nsRichEdit.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/utils.dll
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/utils.dll
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
03a948c55d5867c9d6a004819ab5a157825ad1e75fd2239d2040d0f12251f83c
-
Size
511KB
-
MD5
068d57374cb8cee0f691955861de41cc
-
SHA1
43df504ab44f7eaccbe2d348fb94160a90659acc
-
SHA256
03a948c55d5867c9d6a004819ab5a157825ad1e75fd2239d2040d0f12251f83c
-
SHA512
6534cd92d7480577e4b1f41cf78cb8a61a6aed9d813a98d1eee27ce0b71ff8f3dd8c53f25f4375d1e0862a8a8cf957a47e4570cc0ec0a5be080f8596d0fc4a2e
-
SSDEEP
12288:5imgrxHgqdfpkfBkd8jVGpUGOJR2pUpLiIWWzL1e5m:0NyqJpkqd892GL/145m
Score9/10-
UPX dump on OEP (original entry point)
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/ButtonEvent.dll
-
Size
4KB
-
MD5
55788069d3fa4e1daf80f3339fa86fe2
-
SHA1
d64e05c1879a92d5a8f9ff2fd2f1a53e1a53ae96
-
SHA256
d6e429a063adf637f4d19d4e2eb094d9ff27382b21a1f6dccf9284afb5ff8c7f
-
SHA512
d3b1eec76e571b657df444c59c48cad73a58d1a10ff463ce9f3acd07acce17d589c3396ad5bdb94da585da08d422d863ffe1de11f64298329455f6d8ee320616
-
SSDEEP
96:hrA2+5HGZFYJf9D8IjDflDCoMzncsGSmE:hE2+5mMJfJ8v1zFGSm
Score3/10 -
-
-
Target
$PLUGINSDIR/NSISdl.dll
-
Size
14KB
-
MD5
a5f8399a743ab7f9c88c645c35b1ebb5
-
SHA1
168f3c158913b0367bf79fa413357fbe97018191
-
SHA256
dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
-
SHA512
824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
-
SSDEEP
192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
Score3/10 -
-
-
Target
$PLUGINSDIR/Registry.dll
-
Size
24KB
-
MD5
2b7007ed0262ca02ef69d8990815cbeb
-
SHA1
2eabe4f755213666dbbbde024a5235ddde02b47f
-
SHA256
0b25b20f26de5d5bd795f934c70447112b4981343fcb2dfab3374a4018d28c2d
-
SHA512
aa75ee59ca0b8530eb7298b74e5f334ae9d14129f603b285a3170b82103cfdcc175af8185317e6207142517769e69a24b34fcdf0f58ed50a4960cbe8c22a0aca
-
SSDEEP
384:W2mvyNjH3rPnAZ4wu2QbnC7qB7PnrvScaeYA4CIDEge/QqL2AQ:/75w/OfrzB4CUxuQfA
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/ThreadTimer.dll
-
Size
3KB
-
MD5
cc888fec62967cf5d03f9898e0cb65cb
-
SHA1
b219e1f82c318797eb36700d9d88d3eb461d382e
-
SHA256
7d9235c4c34be7ef9b31efcccfd97bc604d0cd4fb37df9b62ccbd1d460c20d96
-
SHA512
3578f5b36a85cd8726eff15335f6586a583dbee8542a95c5d4df6744ac0c5c41115c7f100cd4b7fb74094d13b22058152ec9fa6662587889427992444668ce41
Score3/10 -
-
-
Target
$PLUGINSDIR/iminentv2_terms.rtf
-
Size
800B
-
MD5
2fd8489135921dc79488469a04b42712
-
SHA1
20c4353f127ceda5dad271c0a3d7d635d0e5e046
-
SHA256
2485db4ce5b1c6742c5eff015dda69a961b45f0540f99c2d27e3da20d15f6a69
-
SHA512
2c5d953753961a63ff4dc205a9fffbe0df38a325d40c55fc695cfa12ca204f34165ed8a10c7a83242451c0ff6d1aa062bad6953d67a8652bdb94ccc48e746b4d
Score4/10 -
-
-
Target
$PLUGINSDIR/inetc.dll
-
Size
76KB
-
MD5
ba2746d730da7f0fcac4866adfef6f51
-
SHA1
5a72a6a18514bed5fcae00f891f1c540bbd3341f
-
SHA256
6a5060a808d9944286d1b38758674b2e206e0ab6235933c029ea9cac833dadca
-
SHA512
bc518c1c280ab5101ebfd3f0ed5c18bdbedbb0d1840337cb13d2cca329f5e622d498868130187da997d21ce2ea8f664c12a34550788b6b55c1b8c54223c484bc
-
SSDEEP
768:4WZcbMjnQg12mHxBwmAHoGtGGCr+C3C5iAKonybl06rzJWNJbwpCfqDt4kJ:HZtQg1rHxymMtWJ3J9bK6rz0Nu5t
Score3/10 -
-
-
Target
$PLUGINSDIR/nsArray.dll
-
Size
6KB
-
MD5
7b42ce0bb387ae8a452136da404bf6b0
-
SHA1
1d9a116d55be1beb0089e392d5ae342e2bffa8a4
-
SHA256
af19101a9303306e7bb8c3ddb7f1174e43b9b8ef969e78b504545ed6afe42fb7
-
SHA512
c50d4a172af361d2978d4204afb712581ffe558950b775e8f0a9fa29e6e8d2076e603fae5417358dceee30c4d4906d8d2dfb4879028818f0f303b8c21f2f6032
-
SSDEEP
96:WvGBPJ7s2zb0UTh76o11VzD73H5fA7tfXxLfA2i:oix710A7lv/3ixX22i
Score9/10-
UPX dump on OEP (original entry point)
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
-
-
Target
$PLUGINSDIR/nsDialogs.dll
-
Size
9KB
-
MD5
c10e04dd4ad4277d5adc951bb331c777
-
SHA1
b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
-
SHA256
e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
-
SHA512
853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
-
SSDEEP
96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
Score3/10 -
-
-
Target
$PLUGINSDIR/nsRichEdit.dll
-
Size
5KB
-
MD5
02f1858b3131ffc3fc5e3a5391d3a489
-
SHA1
454a6d749cf55ff990bd9f57941aca9d1f1674f6
-
SHA256
f00bd6d3e7c7b8e8ad18b7dc6275fb80cc720fb164200a6506f50f6e66998b12
-
SHA512
8147fa8014a5065f4fed7de1fbb9c2ee2c1b94d63596f7bbcf6821ecd41a73d25ebdfa1e71ca74d7598cba063042b6dfcaf050a23d0c855a7b6fbc94147ab41b
-
SSDEEP
96:Z3CA+/dN6g2Aznq+1kaNar7ta6mKAJN0u4KOhB7lkZ3hBjB8wZ:Z3G/D26EaNar7QKzLdZkZX
Score9/10-
UPX dump on OEP (original entry point)
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
-
-
Target
$PLUGINSDIR/utils.dll
-
Size
60KB
-
MD5
ae97029e01393cb7ba395504c49d9fe2
-
SHA1
247b4e1b4100b8ba426fe8957b9de3f32b1bbaee
-
SHA256
eff23a5d372e18b5647ab812e7600eaa84a893ce64f72c96e02592b96f93866b
-
SHA512
5bdb06feeeb8ec51a760e804678ed9d67b7622466b40004d6ff4304d6e3e2b5c3dd6a377ce71a025b5658865f826c97069219c0a763ba28ba01d0127949fbc51
-
SSDEEP
768:mZjOX1HRn5MO7b0u6lv1hssQ55o4bECSq5GatiR:SjOFBE9hrg5olOtiR
Score3/10 -