Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3cd109c901e...56.exe
windows7-x64
3cd109c901e...56.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$SYSDIR/Gw...ni.scr
windows7-x64
1$SYSDIR/Gw...ni.scr
windows10-2004-x64
1$TEMP/dospop.exe
windows7-x64
7$TEMP/dospop.exe
windows10-2004-x64
7tbu03852/dospop.dll
windows7-x64
6tbu03852/dospop.dll
windows10-2004-x64
6tbu03852/options.html
windows7-x64
1tbu03852/options.html
windows10-2004-x64
1tbu03852/s...g.html
windows7-x64
1tbu03852/s...g.html
windows10-2004-x64
1tbu03852/s...b.html
windows7-x64
1tbu03852/s...b.html
windows10-2004-x64
1tbu03852/tbhelper.dll
windows7-x64
1tbu03852/tbhelper.dll
windows10-2004-x64
1tbu03852/t...091.js
windows7-x64
1tbu03852/t...091.js
windows10-2004-x64
1tbu03852/u...ll.exe
windows7-x64
1tbu03852/u...ll.exe
windows10-2004-x64
1tbu03852/update.exe
windows7-x64
1tbu03852/update.exe
windows10-2004-x64
1General
-
Target
cd109c901e0149d9fa176d2f8324fe56
-
Size
3.7MB
-
Sample
240316-epy96sdc96
-
MD5
cd109c901e0149d9fa176d2f8324fe56
-
SHA1
600aa58f790366d86d5231c1d2f9f2d4cdc5ec06
-
SHA256
3d008dd4e61761444e415cfcb82236c71e5a199b38492e53d8d3a7bf1d205d9f
-
SHA512
b1b952241436bc7aebc900e152900f4e3c78d28b2c46f189bf7dfcfceedf972994dd34bc07d664d57098718987e54889d93e37b706f840a1137336a7f9f62293
-
SSDEEP
49152:DFZId8u2urZoT+ZQgIzK/RPbaCL3FnNnO9hHrsOyupX+57q1pnqwdzfF8pPKRW/4:8dV2eqT+NJFb7FNnO9eOpQ2pqwh2VKkQ
Static task
static1
Behavioral task
behavioral1
Sample
cd109c901e0149d9fa176d2f8324fe56.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cd109c901e0149d9fa176d2f8324fe56.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$SYSDIR/Gwen Stefani.scr
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$SYSDIR/Gwen Stefani.scr
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$TEMP/dospop.exe
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$TEMP/dospop.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
tbu03852/dospop.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
tbu03852/dospop.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
tbu03852/options.html
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
tbu03852/options.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
tbu03852/static_img.html
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
tbu03852/static_img.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
tbu03852/static_pub.html
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
tbu03852/static_pub.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
tbu03852/tbhelper.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
tbu03852/tbhelper.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
tbu03852/tbs_include_script_008091.js
Resource
win7-20240220-en
Behavioral task
behavioral20
Sample
tbu03852/tbs_include_script_008091.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
tbu03852/uninstall.exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
tbu03852/uninstall.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
tbu03852/update.exe
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
tbu03852/update.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
cd109c901e0149d9fa176d2f8324fe56
-
Size
3.7MB
-
MD5
cd109c901e0149d9fa176d2f8324fe56
-
SHA1
600aa58f790366d86d5231c1d2f9f2d4cdc5ec06
-
SHA256
3d008dd4e61761444e415cfcb82236c71e5a199b38492e53d8d3a7bf1d205d9f
-
SHA512
b1b952241436bc7aebc900e152900f4e3c78d28b2c46f189bf7dfcfceedf972994dd34bc07d664d57098718987e54889d93e37b706f840a1137336a7f9f62293
-
SSDEEP
49152:DFZId8u2urZoT+ZQgIzK/RPbaCL3FnNnO9hHrsOyupX+57q1pnqwdzfF8pPKRW/4:8dV2eqT+NJFb7FNnO9eOpQ2pqwh2VKkQ
Score3/10 -
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
14KB
-
MD5
d970f6e5200a676ded18b2dfb39a3352
-
SHA1
1d48fb37758c09f3f2a083a2869143383b68daec
-
SHA256
c2ae27669651fd5d3142e35d3317f46b7b3a9683b49f93ccf575628d55e8a6da
-
SHA512
86798df839c84e2dae4596f5b210edd18feaf8637ebe7925b7d80015ff321d324da47f129b91fb1c3229cac8d4f45de5758069a3e7cce7c9dd2d19e305131982
-
SSDEEP
192:s6JaVGQ+xI5EeuyvMmGpeWH2J5xprN+AxTtK72dwF7dBdcQOz:s6JaVh4I5rpPbTt+BdhO
Score3/10 -
-
-
Target
$SYSDIR/Gwen Stefani.scr
-
Size
3.1MB
-
MD5
4a503f4bbe09ec0de2c787c0cec0d4cc
-
SHA1
f1fa3f2e3ba5e8b6fc6852394d8d9678caee8bbe
-
SHA256
454241c544015e088909590d05e010b7a24fd8596e9b204c38aedb4020b9b662
-
SHA512
fe6c559f5e4686f06b0b7151ef2877fa65071bc41ffd8633a98a4896ed15bd330763c07cb19d0f8d7c7a18dc53956821aa6c7eac6ed5206b23d965c3ca9f4e34
-
SSDEEP
49152:5Wlvc+k99snHvXceme5nTAxBhBjDuDXcyQTF7LDlXUp3x8L3rsn1qv:Svc+PHfmehTArnDEAF7LDxUp3x881Q
Score1/10 -
-
-
Target
$TEMP/dospop.exe
-
Size
806KB
-
MD5
067a003a0740da60aaa074f45d5266c5
-
SHA1
a5016ff1703d63c215da0f331003759f70f33659
-
SHA256
edb695897f58c9e5533136fa7836216e2463fcaafd1d82dd5e50fa0fd4be471e
-
SHA512
ae692fc8f5a71d4c189e91bf2d0dc0eea7e7636ebfa911dc76f6cbe69f6f7fb5ed2a497e92de39ad77aab166155a01a4b7ff6f493a63f1639b952431a16d007d
-
SSDEEP
24576:JlzyMuPssLniF/pnFmXb7R5tdpEpFbI+PXj:D2FziFjmX/R3/C+i
-
Loads dropped DLL
-
-
-
Target
tbu03852/dospop.dll
-
Size
2.1MB
-
MD5
0f1846b9162b08ba83b187f8b812882a
-
SHA1
3bb577471354017b5c8f6ff1f5159801000110e8
-
SHA256
0c647f88a0f7f7d6ea9796bd7b0401b6359edeb21060c26b911dcfdfc874b37f
-
SHA512
ebacf6356894c8159d6ce0a3a4aac973b09ad6e80751f0edfda004e1df5cc2221f9967d1eff0cb59a3acfbede05e92ddd20b1dc095b2db65ca5c3eb278b9e5c0
-
SSDEEP
24576:Wp59EhTXStxDbjCAeCQlCZe/Eh9G9la4QoaTVDv9:AkMCNlq0aRoaTd
-
-
-
Target
tbu03852/options.html
-
Size
6KB
-
MD5
adc6e16ce6e97bd1eb19d3a8dad7274f
-
SHA1
12b55eab3225b2250ba051803f7d791db59a46a1
-
SHA256
29e525a91d8ac4ec6bb2fa299a404d9f151b45400c7cab09675a23469373435b
-
SHA512
2c4bc233ae8741fe0a6995845aa88d707b347cfc78745fefac346ce27ddd5b799dd374bbba15516f6e61348f52720be3639cf0cd925a599250a9947a33ab7103
-
SSDEEP
96:BKQ/O9mOdYCQiLFyzNYs90Yi67mX9gPui39bnLNza7/OBgx4wTn:BFj1cFUYJYnV6Bm8
Score1/10 -
-
-
Target
tbu03852/static_img.html
-
Size
503B
-
MD5
2caff3519f5be538757c467d4fec4756
-
SHA1
7e77344f049d9ee4d216b6f412c01ba28596773c
-
SHA256
e94503ad0ea2a4f7002ba70f57e12da9daabb5037b6bedc7725d1fc43a487415
-
SHA512
029814dd117053d03acc6c0cb1af2802256149c6a3588cd41334deeffad6095dc16386887e2053f288b13a5ebd3599cbf9c55c194fde81f3df77045d2609a467
Score1/10 -
-
-
Target
tbu03852/static_pub.html
-
Size
599B
-
MD5
0bf3de7de6f6a9ece7674fb245c7e428
-
SHA1
a71d601820676d5741734e825c7347d59570bc98
-
SHA256
29101ddb9fc880b921c78a8aa0952310ccf0fe4eb03479425500fc2e779d4b2b
-
SHA512
30dc0cf67d772a79dec244882f24c4a6ad71a3139b1b92d6e059f1e677ef138596e71c7bf12c2283b591ad64744b9abd15895fa29c4a600f64c784423bc270b2
Score1/10 -
-
-
Target
tbu03852/tbhelper.dll
-
Size
316KB
-
MD5
8285d06c80bb289d22d7c67c4df2d51c
-
SHA1
0aa83342fd5d23de18fb5da4c4405ddc5b13d75f
-
SHA256
d5df73f377bb5113a5e1c4f7872db6ec4753568a1dadf8d5d09798ac9038ad29
-
SHA512
8de26c47bbcf0ea1dcab869ac21eb6d13751a913903a179fbd3ad8f30f0429b15c60af53c68b2661a7adb34a310ba7d91281da34f0ddfe595c409e11c0f34775
-
SSDEEP
6144:Kvpv2m1KWKTRgvPrUdT4+ND9et9Q9Pmcl:Kp2mwWKqvPn2AtBM
Score1/10 -
-
-
Target
tbu03852/tbs_include_script_008091.js
-
Size
2KB
-
MD5
b734be75b8963660abfa7412095c7a82
-
SHA1
6091ffb358b2596d53f4e74e09da01326258dce8
-
SHA256
078d1eadf0733de055e1ca4ff03bdab7203a66823e9cb4d5a8539d84276759a5
-
SHA512
1bd848ab95724bf8b7c6dc2e91a066a85c0d6239c16c3e548cfaa7a6e57c62e432b820b7503e998bc205d9153ec28c7e590610b8f4481e28b2ef6df35f14cf68
Score1/10 -
-
-
Target
tbu03852/uninstall.exe
-
Size
48KB
-
MD5
652d9d1fc071f90c3e0adb8d79d7ade2
-
SHA1
b63b34d5b3f2d5b75b0b5ff3290752ae1cf3a68a
-
SHA256
7c30673fde7090d6f74623d9bf99e1b2f9661ec94d21d3c2ffb80e1c56d60891
-
SHA512
410d3c2ce92e5db4c12c46d399e88dac97be784f2b50946e40ba1689a524542e6220864d35d625c3cbb104e20ee351362dbb100423224d319fa62add5c3fa1ae
-
SSDEEP
768:HQgC+b3qHaACorVKlW7kn5NyUQZrf+kEuBbtmtw:pba6AC0K+kn5NnQgCltww
Score1/10 -
-
-
Target
tbu03852/update.exe
-
Size
76KB
-
MD5
c050609bcf90684099902c043661e739
-
SHA1
e471468f128e3f8899d53f54f0fd64561a297210
-
SHA256
3751b8982c25d16aee9bc7dd5e22c83f323c8c68780012773612778f20279af8
-
SHA512
2e199a074fbef486518949bd57da18b7b221eb1d9d391c30d7ee73817e2d514438d25ed46f2ab68f79f0645013df5fd35100eebc805bea3830aa7b1cfb8d9846
-
SSDEEP
768:kcBMGw/DoPE/HxUNtN8eWbSQxH+Ns1HBBlKstEZxrxchYy0tkwAhY/zGUiwfGI9f:kcB9VARUeb7xGtNcK9kwAhijhfGTthiF
Score1/10 -