Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

zh-Hans/Pr...es.dll

windows7-x64

1

zh-Hans/Pr...es.dll

windows10-2004-x64

1

zh-Hans/Pr...es.dll

windows7-x64

1

zh-Hans/Pr...es.dll

windows10-2004-x64

1

zh-Hans/Re...es.dll

windows7-x64

1

zh-Hans/Re...es.dll

windows10-2004-x64

1

zh-Hans/Sy...es.dll

windows7-x64

1

zh-Hans/Sy...es.dll

windows10-2004-x64

1

zh-Hans/Sy...es.dll

windows7-x64

1

zh-Hans/Sy...es.dll

windows10-2004-x64

1

zh-Hans/Sy...es.dll

windows7-x64

1

zh-Hans/Sy...es.dll

windows10-2004-x64

1

zh-Hans/Sy...es.dll

windows7-x64

1

zh-Hans/Sy...es.dll

windows10-2004-x64

1

zh-Hans/Sy...es.dll

windows7-x64

1

zh-Hans/Sy...es.dll

windows10-2004-x64

1

zh-Hans/Sy...es.dll

windows7-x64

1

zh-Hans/Sy...es.dll

windows10-2004-x64

1

zh-Hans/UI...es.dll

windows7-x64

1

zh-Hans/UI...es.dll

windows10-2004-x64

1

zh-Hans/UI...es.dll

windows7-x64

1

zh-Hans/UI...es.dll

windows10-2004-x64

1

zh-Hans/UI...es.dll

windows7-x64

1

zh-Hans/UI...es.dll

windows10-2004-x64

1

zh-Hans/UI...es.dll

windows7-x64

1

zh-Hans/UI...es.dll

windows10-2004-x64

1

zh-Hans/Wi...es.dll

windows7-x64

1

zh-Hans/Wi...es.dll

windows10-2004-x64

1

zh-Hans/Wi...es.dll

windows7-x64

1

zh-Hans/Wi...es.dll

windows10-2004-x64

1

zh-Hant/Mi...es.dll

windows7-x64

1

zh-Hant/Mi...es.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SAM.zip

  • Size

    67.3MB

  • Sample

    240405-v9md4sab6s

  • MD5

    663dc2e1e82f8cbcc01ba5c46cfdbf39

  • SHA1

    7c816be8a5d84babfa4148888f359579527e1932

  • SHA256

    7f52c38c911914ed92269a5429a10d0b02a9d44f4e68e2b4e3037a59d1f32983

  • SHA512

    0f55438a95a91d384aa67e5ce6a23e6fcf789a50a3d834a050b38d4b313bc811c1ef1d2f607dde5910420be95ba88d373faa0901b3e9b732527dca99eca52625

  • SSDEEP

    1572864:5GjRETIgcVcT30O+qAkpU6tIr4wIlzOJ6rJKJt1Z4nEjjGC49CBX/JDkni:4ji3sc0Ep97gYnKGCIKX/Jwi

Score
3/10

Malware Config

Targets

    • Target

      zh-Hans/PresentationFramework.resources.dll

    • Size

      179KB

    • MD5

      daf0bc82bc4661285774faa8286507e5

    • SHA1

      26aae7235dc30bf2f260a873d5eefd8834005613

    • SHA256

      3ad943161d9c1a37ff908549943014e367714d10bb6c3a7b34832e0a0be64b81

    • SHA512

      12ffd6446efda97eced95f7afdb7fd1c0dead47a7ae5ea926d96c5f2c24f60b22948eaaf98928a9390e3ee8f480d3cd62d9ebe2e051d0f2ca463e07a44ef958e

    • SSDEEP

      3072:1ZhQkPmMA5r+WIJSrYQoxy9OVAFR+8GBLx79O2UT8qy22ASGZjcYsalvjr81olgb:1myAFR+8ULx7ZtquASGZjBs2vM192CVP

    Score
    1/10
    behavioral1behavioral2

    • Target

      zh-Hans/PresentationUI.resources.dll

    • Size

      42KB

    • MD5

      5d7d14e99dacc26289ce27947eac8556

    • SHA1

      16e53bdc4666f12bc054e3ce3b872c7b9583199b

    • SHA256

      f447346d30576fa713161fa3c2b0e80a65bfec4fb1dc156e65871e210254fee2

    • SHA512

      854b380dc47a318722f3c1cd2ec844f61bc3ef26948bdfe9105656bcecd617864d00a6c3d8c8db288e0ef4427bbf984900a5e6b1a32079700eccb6a2cb52430e

    • SSDEEP

      768:rted0SYi7Skr+FoyNh1hn0A3Prs4vgXfMGv5YdcSsmC5YUghVOAluP/iwD9zC:Md0SYiTiHn0A3Prs4vcfMGv5YdcSsmC2

    Score
    1/10
    behavioral3behavioral4

    • Target

      zh-Hans/ReachFramework.resources.dll

    • Size

      36KB

    • MD5

      a972be8801a10f65d8701ee0215e806c

    • SHA1

      30e9beab5ca041dd4cb26761831b97951300428c

    • SHA256

      fe1fb961c58be6a0bd6d00f6b128d0e9af0d130b669c16bd455fe17bb03dc450

    • SHA512

      50295db16142a5dbdcca494d268f7a3c6356a525a6ec97d86af8d835657ce456633226dffd8ba2228b3c92a3d8a9296bd36194d45b8ce65cd8f53865704a3090

    • SSDEEP

      768:p2UOgMne+nvV9fWpVPKFPl27L2vRmjJAU0rXRCOD8j34GTZy0heSS15WyItgUmdL:tOgMne+nvVuI0wKKItgUmdSZ7iwGGL83

    Score
    1/10
    behavioral5behavioral6

    • Target

      zh-Hans/System.Windows.Controls.Ribbon.resources.dll

    • Size

      18KB

    • MD5

      fb0b58b9607dc883e118f00b6832a208

    • SHA1

      caa6a5c44e7976a50c11d209ddb2345065e23b48

    • SHA256

      c63b99478e197154937ca3bb1ef980031c959276f5d31e1319c2100df49f31fe

    • SHA512

      f6be3fecebf27ddf355059f031692597d2789a9227e8d44c05bdd676c85e0960bc13bd01de2f9231e01c9b78f97decb22ec05deaa963f5387fe24821138ea5a6

    • SSDEEP

      384:v2hWu5Q36eGWG52STb2HRN7AsDNbZR9zJcFEM:vCHQ36eW2S/iZFT9ze

    Score
    1/10
    behavioral7behavioral8

    • Target

      zh-Hans/System.Windows.Forms.Design.resources.dll

    • Size

      136KB

    • MD5

      33cc2160e897f72e2119f5c44ed487be

    • SHA1

      0dc9cdfe87c4e06bb0f4f3202cb63c33df035e96

    • SHA256

      78e33b10ed8d7e7cb5acd344161ffdbcc7b8ec37a1239240366d81a12f943ce1

    • SHA512

      b58faf9352fc66b95af916750c53df1f7cc732596c782cac92f9be5bd2bd6d53153f7265145dfa15cd74f010d79d17a1795c491d9305d3fa2a18fd7498e0e4e2

    • SSDEEP

      3072:osR9MtbGzbtyHZ/I11DKdwWorcP4IVCLAFmbZanokelG5YCVHBqDBvQBaKpWmsSa:oESXJSHea/LTNkD5m

    Score
    1/10
    behavioral10behavioral9

    • Target

      zh-Hans/System.Windows.Forms.Primitives.resources.dll

    • Size

      15KB

    • MD5

      932ba9599c6039f96ed64d2324840173

    • SHA1

      49eb243ef46f80cdb65e4d8c4e7e3f9f1d688819

    • SHA256

      1fbaf9fa17fe5861093aa64c70fa99b76f82e3d2de1f9300677e40abda8dfc02

    • SHA512

      d3a4ef3ba7a89ff566363381297ccaf1b2a712baa2e0dccd7bbf133085f09b3f73184de9b621659eb77abfcb83982cefa0e6ff36395784b665a69dabf7df0949

    • SSDEEP

      192:C8shqO/bWu54iWpWuWXebPpUNTQHnhWgN7a8WW/xu3O6YX01k9z3AB26:lshqaWu54iWpWTb2HRN7DbR9zg3

    Score
    1/10
    behavioral11behavioral12

    • Target

      zh-Hans/System.Windows.Forms.resources.dll

    • Size

      311KB

    • MD5

      5b63c58206bbcaf35859f153c831a15a

    • SHA1

      d5fcce4f58a67f7a28d89088231092af0841861f

    • SHA256

      c52e71d023eb6f160a2e99ff619facda8a581696cfdba2ebce702f1376c39ddd

    • SHA512

      1f8548fac6bc466e7703efed2eb52f369fe8b2f91e72f08605a2c30ab4be247321699f04be350a6553de5ddad93b0f76b5b32a1268d4f15db4c75241b9c58f57

    • SSDEEP

      6144:oqfmo3SCAHZAJ120bBX4HnD/zXIlaZhtBaZe:oqfeYlJE

    Score
    1/10
    behavioral13behavioral14

    • Target

      zh-Hans/System.Windows.Input.Manipulations.resources.dll

    • Size

      16KB

    • MD5

      265648252ea8e137e5cf7af569ee57ba

    • SHA1

      b60aed544eac27d7e0795c3753b7a6469857417c

    • SHA256

      e3ad33765e069f9c5e80dc345172319e1d25bac9b8f6f0d5d0b9af5ab5a8ef29

    • SHA512

      fd0ca6744df260df134e866d87f842d9a15aec92f8963b6d9faa1cb1c9a7840168ef2ac1637830f783dc6bb71699c29846e9fffd2b6b9304a8b782f888fd311c

    • SSDEEP

      384:kpEsRGWW5SNTb2HRN7kacTR9ziHGQFy9t:gGSN/ikHV9ziIt

    Score
    1/10
    behavioral15behavioral16

    • Target

      zh-Hans/System.Xaml.resources.dll

    • Size

      59KB

    • MD5

      a38868da8d8791e1fe3f3357b47f8b4e

    • SHA1

      bb69569f4ebeee1ac6301bcab5531f1b535e2089

    • SHA256

      f331d828c0806c10447714a5761289e1e4d13c88a1f19c0cc6b022df4505e0d4

    • SHA512

      24e47972b43083158a0a270ac58c6760e44507b381e6fdb988ddf4030e1306a1a3fc060170dad98ec935f0aa10e4c7afdff3ca2ce7d3ab5307c3542ce449083e

    • SSDEEP

      768:CoOCK7e4xTuLqN/q1SqsTomTrcmc0oDSM13OQK3KG9/D+3CPQxU08ziXRNgu49hR:8ljx/jAmu32KfyyZNr49hJiaEp4zF

    Score
    1/10
    behavioral17behavioral18

    • Target

      zh-Hans/UIAutomationClient.resources.dll

    • Size

      19KB

    • MD5

      7eeb0bd4262238f4c91f8e3b3989a621

    • SHA1

      de7d5fa5fc66e87d8f6bc3f6dbee45d5868dfadf

    • SHA256

      3ee83811201bff618d067575b041dd30d5649371114f75a83a3536c6cdad6b7d

    • SHA512

      b8bee364145609c2fbbd84713d41dc12e882aef8920fd89644cba0c12da152dd16c896f3994b3bad7f44db95a26a4d07eb1e72b2681ada4bbbeee4a5522a0b5a

    • SSDEEP

      384:T0fet3+LgiuatiFyWSJ5uHaC5kHRN7MOH2IR9zcv:Tiet32g76iFeuHaDkU9z

    Score
    1/10
    behavioral19behavioral20

    • Target

      zh-Hans/UIAutomationClientSideProviders.resources.dll

    • Size

      20KB

    • MD5

      5f837134a5f25942b6987bdf169f6542

    • SHA1

      80ae48f82856c6ebdc477d6cb5cd1a186df666a3

    • SHA256

      31d4167ff066ac1a62f4eca6e92b45bf229c427f24d5d3643f39b66249116769

    • SHA512

      ceace95f16aa69f1987fba9acb97e9d3709c34d9b535bc7f7c31781d466a3f610cdba7fd98b38a132ffaf1a8447a6b8d2de1bb83e4dc547ba9577ab531d23390

    • SSDEEP

      384:NsRBH33lWO5pRW5kHRN7I6NbZR9zJcFDY4o:2RB3NpR/I6FT9zTr

    Score
    1/10
    behavioral21behavioral22

    • Target

      zh-Hans/UIAutomationProvider.resources.dll

    • Size

      15KB

    • MD5

      5f971144e58ca588668eedf5ec75b305

    • SHA1

      29f261b98686840ecc76a128d7ee052f86b2b311

    • SHA256

      c581069094a034a06d854fc7aa71582672b56b05651de735e7801c2238228c93

    • SHA512

      a7c39788a873b92fbaef478bb28ac2e8f6f116cd7b74517f48645c452fb1f73d2402ffb4de39e5ebb5c200d0f072594463c4910f8b6a0bd2d4c37cc654f6f24e

    • SSDEEP

      192:a33Z3r6WHlyfPWM5ebuWXebPpUNTQHnhWgN7acWxBpnwASc1FyttuX01k9z3Asul:kl+EynWM5ebTb2HRN7hcOSR9zrL7c1J

    Score
    1/10
    behavioral23behavioral24

    • Target

      zh-Hans/UIAutomationTypes.resources.dll

    • Size

      18KB

    • MD5

      22fe6ee462a2d23bc069356763db22b1

    • SHA1

      0a7b0370e8e4f820c3507516848b618e34f9793d

    • SHA256

      36ef18109c823e91cdf1cf11c6f0d632b5b8685032af17fb9a67dafa43e0a3e2

    • SHA512

      a8fbf73b0de97fdba7c048af1ec3fdf1f10121b5763e1bd29a1d3119e681d9db4834ef776c8055474dc3660a88cdcf615f18d1af1d4fc9d512c444c20b703f11

    • SSDEEP

      192:QHotCxS22SOB4daq+WLJ5yRBJYgWv3WT56Os1HnhWgN7acWffnyttuX01k9z3As/:/tCxDWWl5I4m5kHRN7ZSR9zrL7/

    Score
    1/10
    behavioral25behavioral26

    • Target

      zh-Hans/WindowsBase.resources.dll

    • Size

      77KB

    • MD5

      405e616c2596641cfee32b36031b3e5b

    • SHA1

      0b60b7995322c589972441a18a8a0482fc605d47

    • SHA256

      db2f628d4c47c216f9e77db3d7a7f956848ad5132a961cc4e0021ccaa1845516

    • SHA512

      98e9eb23f9ead6acd5583425385ad449df62a9ad2a8ee942539d90627b850bfd5cc70a487c93c6363c50dcf90d8150d13fea123e76cfda363c88aa984fc25c27

    • SSDEEP

      1536:OD19jmThZUECgG8HTnhgMHgkwbcx8maR3BMLa6Y7lxnu4J+wnz:OPmThZUECPm6kwbY8mG/6Y7lxnu4J+C

    Score
    1/10
    behavioral27behavioral28

    • Target

      zh-Hans/WindowsFormsIntegration.resources.dll

    • Size

      15KB

    • MD5

      d4363bf67bd5a4a8a946d7493adce356

    • SHA1

      86ae3213a7a18d29edbf4db8de0cb90a5ff73968

    • SHA256

      d7efcce8e268dbb97211564e5879d143beed41dc9b0c37b924cd951291c22d2d

    • SHA512

      da607049ce7647e030679ba4d16e9f57c9da04e75e858affbc559c39f401e1addc1d11bd66284f67e5fa06896bb462825099f36a0d7205dfe2e9a95f85aa1a9d

    • SSDEEP

      384:xKPLFLHLNWq5W/5McTb2HRN7dQkXC4deR9zZjFPGUc:kZHL0qWMc/idQkXC4dC9zZjoUc

    Score
    1/10
    behavioral29behavioral30

    • Target

      zh-Hant/Microsoft.VisualBasic.Forms.resources.dll

    • Size

      24KB

    • MD5

      2c20d347d8a54c4568f993fd101bf045

    • SHA1

      899e669e8a72048c483f36ab20fa69e0050f1fba

    • SHA256

      fabffb0e06404b8fbe283f3542224b5b09931733a3f1dd693b36aaea848bc52a

    • SHA512

      6374bec562a2a874ceb8c0060b932d549e0fabe5cc5889bb4e2151f128f7cda6badae333fbfd15f9fc7ad9687e71cb19f9913bf9bc0b00d47505533e20be825c

    • SSDEEP

      384:dyApbXSXRaRmInXdXxaxtSQuTmd21K/hCiy6lV+aWYHn5whQ5Wp1Tb2HRN7XvDXW:dyACIGtZa6w2VDc51/ifDuO9zIem

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks