Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
7c6740e161c...43.exe
windows7-x64
7c6740e161c...43.exe
windows10-2004-x64
7"aminstall.dll
windows7-x64
1"aminstall.dll
windows10-2004-x64
3"solitaire.exe
windows7-x64
1"solitaire.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows7-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3Uninstall.exe
windows7-x64
7Uninstall.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3fmod.dll
windows7-x64
7fmod.dll
windows10-2004-x64
7General
-
Target
c6740e161c1c531450aadc70a6b98643
-
Size
3.0MB
-
Sample
240313-vyl9zacf77
-
MD5
c6740e161c1c531450aadc70a6b98643
-
SHA1
ccd344c9833dd02662d81c864504d6b8ead208c8
-
SHA256
e86ddd63bce81ceda1e30756ea9cea3cd87fb7fb9f6870992fdae4240346fe20
-
SHA512
d3bce2a1ba79a60052fe3e2c73450965b56194feb889cf3761f7b7cf442395cae6e9058c2c5a827d103e1506e60cabe831186a5e2a1c349d5d20e9946ecba14e
-
SSDEEP
98304:Ek4gyY1nreB41lPyO37TLN1aavvKScI1iBXwJ8:EkXyYpyB43PLvAXU8
Behavioral task
behavioral1
Sample
c6740e161c1c531450aadc70a6b98643.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c6740e161c1c531450aadc70a6b98643.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
"aminstall.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
"aminstall.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
"solitaire.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
"solitaire.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
Uninstall.exe
Resource
win7-20240215-en
Behavioral task
behavioral14
Sample
Uninstall.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
fmod.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
fmod.dll
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
c6740e161c1c531450aadc70a6b98643
-
Size
3.0MB
-
MD5
c6740e161c1c531450aadc70a6b98643
-
SHA1
ccd344c9833dd02662d81c864504d6b8ead208c8
-
SHA256
e86ddd63bce81ceda1e30756ea9cea3cd87fb7fb9f6870992fdae4240346fe20
-
SHA512
d3bce2a1ba79a60052fe3e2c73450965b56194feb889cf3761f7b7cf442395cae6e9058c2c5a827d103e1506e60cabe831186a5e2a1c349d5d20e9946ecba14e
-
SSDEEP
98304:Ek4gyY1nreB41lPyO37TLN1aavvKScI1iBXwJ8:EkXyYpyB43PLvAXU8
Score7/10-
Loads dropped DLL
-
-
-
Target
"aminstall.dll"
-
Size
76KB
-
MD5
b91f126675ef39f4ee46f877e230d255
-
SHA1
2411fed6cbaf6cd80fbd374fa0af18a1280ec9b8
-
SHA256
803606254069701d1e5e05cc7a5e98292145c42549d224e323be17b24d80c441
-
SHA512
05e352cbb2f770a3a17021b9beb08877d14ab333c928b8bf0f393c5bd6a738fac4453e7661e5ad3340e886f3461a2050191a0284b1de8f761b2d6974703bb58c
-
SSDEEP
768:MNV5rhiqaZ1V7V5yytiCLqmfTKeqvi8NT7jypjGZ1wZgH1Y10BlnkE52zGnApuxo:Mf5hgVXyy1luTXyVMwW1NkEQGnAp1cO
Score3/10 -
-
-
Target
"solitaire.exe"
-
Size
1.3MB
-
MD5
f098578c429b097f00fae63b3cef8af1
-
SHA1
555e13c9821da2659934a029c9c02cf6b2c6e78a
-
SHA256
ecdd18c577a93209a6ee89f8162af7df8427eaeeda314143a699281ace3dd545
-
SHA512
cb657a9e97e3dd7cc3d9e32dc1429db32f37c0727c94432eb1d8eab03f4e3b8e063d99873d2531a4559f999c05d324ce6825d81eb1ab0fcc556ce24af79e7b84
-
SSDEEP
24576:e1Nmo09OGPrCXPVPQIMTh8Yp5z1sgvXPpHMUs84uYxtrvGX3uY0m8W:eKoFqeNPQI48Kf7fRHXR+r6
Score3/10 -
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
12KB
-
MD5
4c7d97d0786ff08b20d0e8315b5fc3cb
-
SHA1
bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c
-
SHA256
75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84
-
SHA512
f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a
-
SSDEEP
192:6KdqJ4Bhf1mdCMI26t510swClJOeFIsm7F1QuPs:6KdE4zAddwR0swqOeFxu
Score3/10 -
-
-
Target
$PLUGINSDIR/StartMenu.dll
-
Size
6KB
-
MD5
388c408cff35a38d04e3cda18f63af07
-
SHA1
9c2aa2ed8b526ace4267acbcf5648b2601019ac4
-
SHA256
4f945ad53b7aa8ed516b2f58c2ed9f15c13bbdf0e489d71c7347b80583cee5fd
-
SHA512
542292d61ff209f6c98c62ebad549024611a7d42fb951f8cc211b886f0d202d5e0da3b754c84c8a00043c748ed527351fc524357412cf88875e6bf729cbba46f
-
SSDEEP
96:MFJsQxcnqakqeStS6+NMKQwECv0nGhFZxTxZ05hU/61:C9xcnqakCN+N9n0na1K5y61
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
9KB
-
MD5
e085476805e8f5ef1c7ed635c5309017
-
SHA1
609e79fdc29d6dee40cc5dd333094db5f9f63eec
-
SHA256
4eb689e2db8d683afcfffe6dee1985fbd458d2770093547331d563acece80c67
-
SHA512
082932aea8d993de8ca1eeb60f7bb4e56cc7eab4a683c59822b2c544223febab5915bb2b7c2e2dad79472bbd8ad400770dd7c1f112cef24d18ebd0f1ad63fe9f
-
SSDEEP
96:DomrrPB3x4gJcp7/qzt1SGr3DEkJjUFezthPhwrWNHRW5j5/Y0+YAZIhtyPEM75C:nnTEjwT3XgFshpwrlR5/7AZlTpVHlmV
Score3/10 -
-
-
Target
Uninstall.exe
-
Size
66KB
-
MD5
8c9c858c5ef65e51dbb0a6015ccec5d6
-
SHA1
24d393aa5b7a73f1489299c2742077b9ea2ef926
-
SHA256
8e204d03863548bb96c3c96d6193eba8c2d3e6696326e83a6712c8b8cbc0d716
-
SHA512
56fa8a68b4208469b913a602a305f9560007f30b39410aa6f39b562a39f0b88be68445361e5ee3a6c5c2871a32a9b00e20c0cbf66d2391aea26071e255ac41d3
-
SSDEEP
1536:ue0DnjRrJav2FnUIRr2vMYBJvqAELVigvHhn1bi+v/5Qmdm:yD11a8YBJSAI0Q1bmOm
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
12KB
-
MD5
4c7d97d0786ff08b20d0e8315b5fc3cb
-
SHA1
bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c
-
SHA256
75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84
-
SHA512
f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a
-
SSDEEP
192:6KdqJ4Bhf1mdCMI26t510swClJOeFIsm7F1QuPs:6KdE4zAddwR0swqOeFxu
Score3/10 -
-
-
Target
fmod.dll
-
Size
157KB
-
MD5
53f2a550bb1b7333f44112ab18482c33
-
SHA1
cc1330cb0afc9fcf62588b89c66a92803408506e
-
SHA256
d4b8a9555e5073fb87624b56ca21451047d4763458a328e765fa93d0d80f8aad
-
SHA512
eaa72d9b78833678f9b9ea2f2e604994711ee5f221817dbfb82d1990bcfc264e9979a0cf499794dcee3e5b2af53f1c7b5bbc61c4b3c29095b9c8d2832bf779c7
-
SSDEEP
1536:m6gnQQ6WgWV2Mxh4MoU6bId5xlYxUDzQUDMd8ZEVIhiBQe6A0j/MVfEGuZL5yfso:mfQcpYMxGSY3qTZbZeHpE1vVWZbxF1
Score7/10 -