Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

c6740e161c...43.exe

windows7-x64

7

c6740e161c...43.exe

windows10-2004-x64

7

"aminstall.dll

windows7-x64

1

"aminstall.dll

windows10-2004-x64

3

"solitaire.exe

windows7-x64

1

"solitaire.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

fmod.dll

windows7-x64

7

fmod.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c6740e161c1c531450aadc70a6b98643

  • Size

    3.0MB

  • Sample

    240313-vyl9zacf77

  • MD5

    c6740e161c1c531450aadc70a6b98643

  • SHA1

    ccd344c9833dd02662d81c864504d6b8ead208c8

  • SHA256

    e86ddd63bce81ceda1e30756ea9cea3cd87fb7fb9f6870992fdae4240346fe20

  • SHA512

    d3bce2a1ba79a60052fe3e2c73450965b56194feb889cf3761f7b7cf442395cae6e9058c2c5a827d103e1506e60cabe831186a5e2a1c349d5d20e9946ecba14e

  • SSDEEP

    98304:Ek4gyY1nreB41lPyO37TLN1aavvKScI1iBXwJ8:EkXyYpyB43PLvAXU8

Score
7/10
upx

Malware Config

Targets

    • Target

      c6740e161c1c531450aadc70a6b98643

    • Size

      3.0MB

    • MD5

      c6740e161c1c531450aadc70a6b98643

    • SHA1

      ccd344c9833dd02662d81c864504d6b8ead208c8

    • SHA256

      e86ddd63bce81ceda1e30756ea9cea3cd87fb7fb9f6870992fdae4240346fe20

    • SHA512

      d3bce2a1ba79a60052fe3e2c73450965b56194feb889cf3761f7b7cf442395cae6e9058c2c5a827d103e1506e60cabe831186a5e2a1c349d5d20e9946ecba14e

    • SSDEEP

      98304:Ek4gyY1nreB41lPyO37TLN1aavvKScI1iBXwJ8:EkXyYpyB43PLvAXU8

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      "aminstall.dll"

    • Size

      76KB

    • MD5

      b91f126675ef39f4ee46f877e230d255

    • SHA1

      2411fed6cbaf6cd80fbd374fa0af18a1280ec9b8

    • SHA256

      803606254069701d1e5e05cc7a5e98292145c42549d224e323be17b24d80c441

    • SHA512

      05e352cbb2f770a3a17021b9beb08877d14ab333c928b8bf0f393c5bd6a738fac4453e7661e5ad3340e886f3461a2050191a0284b1de8f761b2d6974703bb58c

    • SSDEEP

      768:MNV5rhiqaZ1V7V5yytiCLqmfTKeqvi8NT7jypjGZ1wZgH1Y10BlnkE52zGnApuxo:Mf5hgVXyy1luTXyVMwW1NkEQGnAp1cO

    Score
    3/10
    behavioral3behavioral4

    • Target

      "solitaire.exe"

    • Size

      1.3MB

    • MD5

      f098578c429b097f00fae63b3cef8af1

    • SHA1

      555e13c9821da2659934a029c9c02cf6b2c6e78a

    • SHA256

      ecdd18c577a93209a6ee89f8162af7df8427eaeeda314143a699281ace3dd545

    • SHA512

      cb657a9e97e3dd7cc3d9e32dc1429db32f37c0727c94432eb1d8eab03f4e3b8e063d99873d2531a4559f999c05d324ce6825d81eb1ab0fcc556ce24af79e7b84

    • SSDEEP

      24576:e1Nmo09OGPrCXPVPQIMTh8Yp5z1sgvXPpHMUs84uYxtrvGX3uY0m8W:eKoFqeNPQI48Kf7fRHXR+r6

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      12KB

    • MD5

      4c7d97d0786ff08b20d0e8315b5fc3cb

    • SHA1

      bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c

    • SHA256

      75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84

    • SHA512

      f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a

    • SSDEEP

      192:6KdqJ4Bhf1mdCMI26t510swClJOeFIsm7F1QuPs:6KdE4zAddwR0swqOeFxu

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/StartMenu.dll

    • Size

      6KB

    • MD5

      388c408cff35a38d04e3cda18f63af07

    • SHA1

      9c2aa2ed8b526ace4267acbcf5648b2601019ac4

    • SHA256

      4f945ad53b7aa8ed516b2f58c2ed9f15c13bbdf0e489d71c7347b80583cee5fd

    • SHA512

      542292d61ff209f6c98c62ebad549024611a7d42fb951f8cc211b886f0d202d5e0da3b754c84c8a00043c748ed527351fc524357412cf88875e6bf729cbba46f

    • SSDEEP

      96:MFJsQxcnqakqeStS6+NMKQwECv0nGhFZxTxZ05hU/61:C9xcnqakCN+N9n0na1K5y61

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/System.dll

    • Size

      9KB

    • MD5

      e085476805e8f5ef1c7ed635c5309017

    • SHA1

      609e79fdc29d6dee40cc5dd333094db5f9f63eec

    • SHA256

      4eb689e2db8d683afcfffe6dee1985fbd458d2770093547331d563acece80c67

    • SHA512

      082932aea8d993de8ca1eeb60f7bb4e56cc7eab4a683c59822b2c544223febab5915bb2b7c2e2dad79472bbd8ad400770dd7c1f112cef24d18ebd0f1ad63fe9f

    • SSDEEP

      96:DomrrPB3x4gJcp7/qzt1SGr3DEkJjUFezthPhwrWNHRW5j5/Y0+YAZIhtyPEM75C:nnTEjwT3XgFshpwrlR5/7AZlTpVHlmV

    Score
    3/10
    behavioral11behavioral12

    • Target

      Uninstall.exe

    • Size

      66KB

    • MD5

      8c9c858c5ef65e51dbb0a6015ccec5d6

    • SHA1

      24d393aa5b7a73f1489299c2742077b9ea2ef926

    • SHA256

      8e204d03863548bb96c3c96d6193eba8c2d3e6696326e83a6712c8b8cbc0d716

    • SHA512

      56fa8a68b4208469b913a602a305f9560007f30b39410aa6f39b562a39f0b88be68445361e5ee3a6c5c2871a32a9b00e20c0cbf66d2391aea26071e255ac41d3

    • SSDEEP

      1536:ue0DnjRrJav2FnUIRr2vMYBJvqAELVigvHhn1bi+v/5Qmdm:yD11a8YBJSAI0Q1bmOm

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral13behavioral14

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      12KB

    • MD5

      4c7d97d0786ff08b20d0e8315b5fc3cb

    • SHA1

      bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c

    • SHA256

      75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84

    • SHA512

      f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a

    • SSDEEP

      192:6KdqJ4Bhf1mdCMI26t510swClJOeFIsm7F1QuPs:6KdE4zAddwR0swqOeFxu

    Score
    3/10
    behavioral15behavioral16

    • Target

      fmod.dll

    • Size

      157KB

    • MD5

      53f2a550bb1b7333f44112ab18482c33

    • SHA1

      cc1330cb0afc9fcf62588b89c66a92803408506e

    • SHA256

      d4b8a9555e5073fb87624b56ca21451047d4763458a328e765fa93d0d80f8aad

    • SHA512

      eaa72d9b78833678f9b9ea2f2e604994711ee5f221817dbfb82d1990bcfc264e9979a0cf499794dcee3e5b2af53f1c7b5bbc61c4b3c29095b9c8d2832bf779c7

    • SSDEEP

      1536:m6gnQQ6WgWV2Mxh4MoU6bId5xlYxUDzQUDMd8ZEVIhiBQe6A0j/MVfEGuZL5yfso:mfQcpYMxGSY3qTZbZeHpE1vVWZbxF1

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral17behavioral18

MITRE ATT&CK Matrix

Tasks