Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

c529c0a799...fb.exe

windows7-x64

7

c529c0a799...fb.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...ln.dll

windows7-x64

3

$PLUGINSDI...ln.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c529c0a7990ed68d0c554095caf798fb

  • Size

    708KB

  • Sample

    240313-gs9lesee31

  • MD5

    c529c0a7990ed68d0c554095caf798fb

  • SHA1

    87835e95ac75bcedb24cb8262513ea976567f40c

  • SHA256

    130dff80cf9bc9a5acab926c0bd69941cc381f5c6999117e4f3730409d5d13b3

  • SHA512

    2d6de544b66700d5f013a4dd1f5c981da9708bd44851918eddd89b18d9cd44c840f05e68200b9fb9ce85876c287ea7afa6141968cc92f87a7ba815e4a25f106d

  • SSDEEP

    12288:aCf1W7zQImcgeZdisgm5T40xHeNNVEhhvl7/xjwzhdwfc8vy4hf:aWKF4eZ4s9O8eNXALxjwz586a

Score
7/10

Malware Config

Targets

    • Target

      c529c0a7990ed68d0c554095caf798fb

    • Size

      708KB

    • MD5

      c529c0a7990ed68d0c554095caf798fb

    • SHA1

      87835e95ac75bcedb24cb8262513ea976567f40c

    • SHA256

      130dff80cf9bc9a5acab926c0bd69941cc381f5c6999117e4f3730409d5d13b3

    • SHA512

      2d6de544b66700d5f013a4dd1f5c981da9708bd44851918eddd89b18d9cd44c840f05e68200b9fb9ce85876c287ea7afa6141968cc92f87a7ba815e4a25f106d

    • SSDEEP

      12288:aCf1W7zQImcgeZdisgm5T40xHeNNVEhhvl7/xjwzhdwfc8vy4hf:aWKF4eZ4s9O8eNXALxjwz586a

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/ZipDLL.dll

    • Size

      163KB

    • MD5

      2dc35ddcabcb2b24919b9afae4ec3091

    • SHA1

      9eeed33c3abc656353a7ebd1c66af38cccadd939

    • SHA256

      6bbeb39747f1526752980d4dbec2fe2c7347f3cc983a79c92561b92fe472e7a1

    • SHA512

      0ccac336924f684da1f73db2dd230a0c932c5b4115ae1fa0e708b9db5e39d2a07dc54dac8d95881a42069cbb2c2886e880cdad715deda83c0de38757a0f6a901

    • SSDEEP

      3072:8CkSJJ30k1pn2T4ISnUGN+E8KnCOxA17jxLmRtWHyPDQFllOdJiSg:tkSJy+c30UxbKnA1hLKWSVdk

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/hovoyln.dll

    • Size

      153KB

    • MD5

      e9a8475b034021362ec21c66375fe428

    • SHA1

      e256a7099d2202b9d8eb67a5fdc287407c63b8c5

    • SHA256

      657261a73c565507a57db654c43e6724fef7884b72a5b3163d5b31ad85a3baa4

    • SHA512

      480fd7de9cbb3c07955fe3aa4cd7e7b8b5eca25266300ed8b010941eaa75bf81e751c555968e2fd3b33a885ab178a019d6a71a1a5c43891bfc92ebdad89d1621

    • SSDEEP

      3072:GsyPERydg4ri/VXg8x1nKH+wG/vsqN6k:rYERCGL1ncxGQk

    Score
    3/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks