Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3c11f1068be...b2.exe
windows7-x64
7c11f1068be...b2.exe
windows10-2004-x64
7$LOCALAPPD...fg.exe
windows7-x64
6$LOCALAPPD...fg.exe
windows10-2004-x64
6$PLUGINSDI...am.dll
windows7-x64
3$PLUGINSDI...am.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
1$PLUGINSDI...LL.dll
windows10-2004-x64
1$PLUGINSDI...te.dll
windows7-x64
1$PLUGINSDI...te.dll
windows10-2004-x64
1$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$TEMP/nsisos.dll
windows7-x64
1$TEMP/nsisos.dll
windows10-2004-x64
1General
-
Target
c11f1068becb883528d1f7f759a11bb2
-
Size
308KB
-
Sample
240311-vgj4aaah53
-
MD5
c11f1068becb883528d1f7f759a11bb2
-
SHA1
cc08844c9a756d64ae9691096ec45b00a57cbbb0
-
SHA256
e6ae1063da1fa6db72607d1ac2b513e6023018150d16ca9f126f7088cba84407
-
SHA512
2c81ef48025c4ccc6ba077188eba66348bd14943bb264ad7ed8c032bc746eeaf17f239316f356c58242071f474d7c7c7a5821afc24993d346737ccac363f5556
-
SSDEEP
6144:Ke34ebpLo36rFR1gmq3HGpv4qCiRZHV55G3/w0ljEN:Xl036NgEMqb2LjEN
Static task
static1
Behavioral task
behavioral1
Sample
c11f1068becb883528d1f7f759a11bb2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c11f1068becb883528d1f7f759a11bb2.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$LOCALAPPDATA/Microsoft/Windows Searchbox/searchboxcfg.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$LOCALAPPDATA/Microsoft/Windows Searchbox/searchboxcfg.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/DLLWaitForKillProgram.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/DLLWaitForKillProgram.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/SelfDelete.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/SelfDelete.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
$TEMP/nsisos.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$TEMP/nsisos.dll
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
c11f1068becb883528d1f7f759a11bb2
-
Size
308KB
-
MD5
c11f1068becb883528d1f7f759a11bb2
-
SHA1
cc08844c9a756d64ae9691096ec45b00a57cbbb0
-
SHA256
e6ae1063da1fa6db72607d1ac2b513e6023018150d16ca9f126f7088cba84407
-
SHA512
2c81ef48025c4ccc6ba077188eba66348bd14943bb264ad7ed8c032bc746eeaf17f239316f356c58242071f474d7c7c7a5821afc24993d346737ccac363f5556
-
SSDEEP
6144:Ke34ebpLo36rFR1gmq3HGpv4qCiRZHV55G3/w0ljEN:Xl036NgEMqb2LjEN
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
-
-
Target
$LOCALAPPDATA/Microsoft/Windows Searchbox/searchboxcfg.exe
-
Size
407KB
-
MD5
dc69eb8aea7fd76a9acb740f3b46e445
-
SHA1
28c5bc35621319024e4828d17704fceb7e8e3246
-
SHA256
ceaefb320c8b371f8a799ee61f7165cf8664a8c954cebc3b131a5729139280c0
-
SHA512
80f9469cb64201d0a66688db796709d95f54a8bc959510421b92076eebfde745348d1507e5cfa64dc7aabd2e8b250f727dd008e1345e32f4bd6b56c442374d33
-
SSDEEP
12288:CA0CPyGQuaxkAC69V8jEbViN9VAM9pGHNu4B2U1nN:CEPlQXkAC6IjatI4rB
Score6/10-
Adds Run key to start application
-
-
-
Target
$PLUGINSDIR/DLLWaitForKillProgram.dll
-
Size
28KB
-
MD5
9c4b8ec42d89f7557bfd90798ce52787
-
SHA1
2376dde426ea65aa27c30e304086310605382475
-
SHA256
ed52bdad7b383a179b9b0e21fefdda2d72695c5263a815d5e1e0bfac6c718548
-
SHA512
17c12a27a08746755868558c037376dd7e20f03f0f71888c1329903b70975a54f57786c3c32bf88aaf30119f11ed978a6830ba91949e11cfc94fbb5ad95305b7
-
SSDEEP
96:EP5ZuFye0MyQW4uPwhs+R/+gFrE1m/U/uG98bp2y+HS21kEZ1b+4Tu9C1uGg8wBu:akFyFRQ5wIzlH/UGq36EZY4T+Gul8U
Score3/10 -
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
14KB
-
MD5
eef9e469e8a30717974499f277d97e2a
-
SHA1
2d33c25984ebd9116beeb55cdde4c5c86c023e5d
-
SHA256
1f35bb6728237483c779005fc227e69fef51b0bafd32d15855d483948a337078
-
SHA512
d860132106a1c03dfa23f983b3c503f1216ac02f3d47833b96dfb333fb30bc8ab4d4fecd1f1f0a89f0c7f3586405461e2d53c26f282bb48970e549659b364b48
-
SSDEEP
192:8np6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+MTjK72dwF7dBEnbok:8p6UdHXcIiY535zBtMTj+BEnbo
Score3/10 -
-
-
Target
$PLUGINSDIR/KillProcDLL.dll
-
Size
36KB
-
MD5
6958016193a066833556992077bad4fe
-
SHA1
5f564945936f99381d7e2408f034f97d069005a4
-
SHA256
f38c669c87f2a73768a27a01622690997e9d93d5ca3830b349bd24c3ff9f8d2e
-
SHA512
fd6ab5c341b331b80c940ba97a2cd14547c796933a2df26d3dd87ede1602b86d9f8c37baebd7dd4c68d811199fc96a27ad4cb995bb8889d51af91db9f43ba0a7
-
SSDEEP
384:IL6T2Izs/XGCanZSwEfj5lwTSYlml89oayKA15JiQNRw/9uosAUdJofiiqd:88Y9gZSwq1lwTS2XA15DRm9cddJo6l
Score1/10 -
-
-
Target
$PLUGINSDIR/SelfDelete.dll
-
Size
24KB
-
MD5
7bf1bd7661385621c7908e36958f582e
-
SHA1
43242d7731c097e95fb96753c8262609ff929410
-
SHA256
c0ad2c13d48c9fe62f898da822a5f08be3bf6c4e2c1c7ffdf7634f2ca4a8859e
-
SHA512
8317af5cc3ac802eb095f3fa8cc71daa1265ca58fead031c07872f3d4bb07663a7002ae734fad392a7617f0923fe0caf1f54ed55afdf8516a6a08e202d86fa7f
-
SSDEEP
96:1dIrJYYrzPpqAAZ9sNIaI2y9WulXEGNRrG:nuYATpq/viyYuEYRr
Score1/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c6f5b9596db45ce43f14b64e0fbcf552
-
SHA1
665a2207a643726602dc3e845e39435868dddabc
-
SHA256
4b6da3f2bdb6c452fb493b98f6b7aa1171787dbd3fa2df2b3b22ccaeac88ffa0
-
SHA512
8faa0204f9ed2721acede285be843b5a2d7f9986841bcf3816ebc8900910afb590816c64aebd2dd845686daf825bbf9970cb4a08b20a785c7e54542eddc5b09a
-
SSDEEP
192:qADKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQbVUSF:qAViJrtFRdbmXK8+WVUw
Score3/10 -
-
-
Target
$TEMP/nsisos.dll
-
Size
5KB
-
MD5
69806691d649ef1c8703fd9e29231d44
-
SHA1
e2193fcf5b4863605eec2a5eb17bf84c7ac00166
-
SHA256
ba79ab7f63f02ed5d5d46b82b11d97dac5b7ef7e9b9a4df926b43ceac18483b6
-
SHA512
5e5e0319e701d15134a01cb6472c624e271e99891058aef4dfe779c29c73899771a5b6f8b1cd61b543a3b3defeaecaa080c9cc4e76e84038ca08e12084f128eb
-
SSDEEP
48:6EyuygeHCfxwU5x+6kx/k1gONv27oBc2OkIrHHl:VeHCf2762kKsu7oGjkIrn
Score1/10 -