Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3Silent Cli....1.exe
windows7-x64
7Silent Cli....1.exe
windows10-2004-x64
7$PLUGINSDI...er.dll
windows7-x64
1$PLUGINSDI...er.dll
windows10-2004-x64
1$PLUGINSDI...ls.dll
windows7-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
$PLUGINSDI...ll.dll
windows7-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3LICENSES.c...m.html
windows7-x64
1LICENSES.c...m.html
windows10-2004-x64
1Silent Client.exe
windows7-x64
1Silent Client.exe
windows10-2004-x64
7d3dcompiler_47.dll
windows10-2004-x64
1ffmpeg.dll
windows7-x64
1ffmpeg.dll
windows10-2004-x64
libEGL.dll
windows7-x64
1libEGL.dll
windows10-2004-x64
1libGLESv2.dll
windows7-x64
1libGLESv2.dll
windows10-2004-x64
1resources/app.js
windows7-x64
1resources/app.js
windows10-2004-x64
1resources/...r.html
windows7-x64
1resources/...r.html
windows10-2004-x64
1resources/...ter.js
windows7-x64
1resources/...ter.js
windows10-2004-x64
1resources/elevate.exe
windows7-x64
1resources/elevate.exe
windows10-2004-x64
1vk_swiftshader.dll
windows7-x64
1vk_swiftshader.dll
windows10-2004-x64
1vulkan-1.dll
windows7-x64
1General
-
Target
Silent Client Setup 4.1.1.exe
-
Size
69.9MB
-
Sample
240406-br661sha22
-
MD5
352646f0b563824510222700fee8bb22
-
SHA1
2ab0863b65fb9e699634bdab6db4f5bd6fbdc52f
-
SHA256
e10e4e255af0ba3293aed0222096b70d627a0a8217f1d3d76c2d6813e3074144
-
SHA512
4970c1b463febbb5ce375268fb12d413290bcf56e0ffa0a24ccc2b4fcee33fa0973cfd86ed2e772e16c88cd6aacdd1c08bd2d488206a8198abc86f9b6939b38a
-
SSDEEP
1572864:QwnjRkJ7cQG4Cfwn3Hi0MoXGeLxwTR5Tlpl+YfYVD9bIHIjyshvOWUMT+0:QERdQ133MG3STzRpQYfKD1jR2FMTZ
Static task
static1
Behavioral task
behavioral1
Sample
Silent Client Setup 4.1.1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Silent Client Setup 4.1.1.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win7-20240319-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win7-20240319-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/WinShell.dll
Resource
win7-20240319-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
LICENSES.chromium.html
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
LICENSES.chromium.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
Silent Client.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Silent Client.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
d3dcompiler_47.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral16
Sample
ffmpeg.dll
Resource
win7-20240221-en
Behavioral task
behavioral17
Sample
ffmpeg.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral18
Sample
libEGL.dll
Resource
win7-20240221-en
Behavioral task
behavioral19
Sample
libEGL.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral20
Sample
libGLESv2.dll
Resource
win7-20240215-en
Behavioral task
behavioral21
Sample
libGLESv2.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral22
Sample
resources/app.js
Resource
win7-20240215-en
Behavioral task
behavioral23
Sample
resources/app.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral24
Sample
resources/assets/updater/updater.html
Resource
win7-20240221-en
Behavioral task
behavioral25
Sample
resources/assets/updater/updater.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral26
Sample
resources/assets/updater/updater.js
Resource
win7-20240221-en
Behavioral task
behavioral27
Sample
resources/assets/updater/updater.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral28
Sample
resources/elevate.exe
Resource
win7-20240221-en
Behavioral task
behavioral29
Sample
resources/elevate.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral30
Sample
vk_swiftshader.dll
Resource
win7-20231129-en
Behavioral task
behavioral31
Sample
vk_swiftshader.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral32
Sample
vulkan-1.dll
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
Silent Client Setup 4.1.1.exe
-
Size
69.9MB
-
MD5
352646f0b563824510222700fee8bb22
-
SHA1
2ab0863b65fb9e699634bdab6db4f5bd6fbdc52f
-
SHA256
e10e4e255af0ba3293aed0222096b70d627a0a8217f1d3d76c2d6813e3074144
-
SHA512
4970c1b463febbb5ce375268fb12d413290bcf56e0ffa0a24ccc2b4fcee33fa0973cfd86ed2e772e16c88cd6aacdd1c08bd2d488206a8198abc86f9b6939b38a
-
SSDEEP
1572864:QwnjRkJ7cQG4Cfwn3Hi0MoXGeLxwTR5Tlpl+YfYVD9bIHIjyshvOWUMT+0:QERdQ133MG3STzRpQYfKD1jR2FMTZ
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
-
-
Target
$PLUGINSDIR/SpiderBanner.dll
-
Size
9KB
-
MD5
17309e33b596ba3a5693b4d3e85cf8d7
-
SHA1
7d361836cf53df42021c7f2b148aec9458818c01
-
SHA256
996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
-
SHA512
1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
-
SSDEEP
192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
Score1/10 -
-
-
Target
$PLUGINSDIR/StdUtils.dll
-
Size
100KB
-
MD5
c6a6e03f77c313b267498515488c5740
-
SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15
-
SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
-
SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
-
SSDEEP
3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
12KB
-
MD5
0d7ad4f45dc6f5aa87f606d0331c6901
-
SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457
-
SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
-
SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
-
SSDEEP
192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
Score3/10 -
-
-
Target
$PLUGINSDIR/WinShell.dll
-
Size
3KB
-
MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56
-
SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c
-
SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
-
SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
Score3/10 -
-
-
Target
LICENSES.chromium.html
-
Size
6.5MB
-
MD5
180f8acc70405077badc751453d13625
-
SHA1
35dc54acad60a98aeec47c7ade3e6a8c81f06883
-
SHA256
0bfa9a636e722107b6192ff35c365d963a54e1de8a09c8157680e8d0fbbfba1c
-
SHA512
40d3358b35eb0445127c70deb0cb87ec1313eca285307cda168605a4fd3d558b4be9eb24a59568eca9ee1f761e578c39b2def63ad48e40d31958db82f128e0ec
-
SSDEEP
24576:d7rs5kjWSnB3lWNeUmf0f6W6M6q6A6r/HXpErpem:rovj
Score1/10 -
-
-
Target
Silent Client.exe
-
Size
154.5MB
-
MD5
419089f6202ff1b2b7e52889537de306
-
SHA1
f0b05366155d20e93e3825debbc0bb144758ea44
-
SHA256
07401664d6f9f78d5e607eb08cf409feb46b4daa082facaa72076adba12976a6
-
SHA512
e98429d5539329ca78c969051e9d7e7019fb9bc8e56c326167f23c0b3fbcba5b1f90b9c9ba28af7ab0819a867aa330f4930f6552718f50038f1e6c9d5c4c531f
-
SSDEEP
1572864:kH3tCV62ipzpxI9Sua3nkTOFqXagQB3zR+KRkdW0v8KEtL2kTbwo7XWyHz15Dods:JFUFdBjIK/YW9x
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
-
-
Target
d3dcompiler_47.dll
-
Size
4.7MB
-
MD5
cb9807f6cf55ad799e920b7e0f97df99
-
SHA1
bb76012ded5acd103adad49436612d073d159b29
-
SHA256
5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a
-
SHA512
f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62
-
SSDEEP
49152:IuhjwXkKcimPVqB4faGCMhGNYYpQVTxx6k/ftO4w6FXKpOD21pLeXvZCoFwI8cc:oy904wYbZCoOI85oyI
Score1/10 -
-
-
Target
ffmpeg.dll
-
Size
2.7MB
-
MD5
37d1c1e89282be8852d443cf51f629b7
-
SHA1
bf80d5df917ffbaf5db44512fb195d99036b54ec
-
SHA256
8d22431f42e8e258eba762835e425bab3532bfc7b6a5743b6feea7063d61ca63
-
SHA512
daf674f7be70d783338ff0df16f5e61a7661ab9abfcee9a0a5bd29cc35d8ee5f03825be77760a2ce334ba099361b7394bf3ad8684ad980ff7a8169c921619118
-
SSDEEP
49152:IMoI7Qj3trgDtcfkW76fSL5Yqq6uthy4Y6NO8PyJegPTagrcjdiCOi2iNN3lzl3C:q3Kk76fUq/4TagreBOirnW
Score1/10 -
-
-
Target
libEGL.dll
-
Size
468KB
-
MD5
6dff2f3923b2de2258cef0399e7a807d
-
SHA1
fc3679476c88113d5ff6589784e7fc1be5c72d17
-
SHA256
eb7583831a87d12390cad7f1e967f7637b588c67f51ecd8f8b996fc01fe65b19
-
SHA512
9590d369d248876be8cf3ba8142ad8e3982620fcadc8fe64490a36a9e4e6c3dc2a96a7f897fe1b99aea293bf16b2662ceabbb4f8b74e14c510f24825ee0aa4d3
-
SSDEEP
12288:Pu0LAjbIkyVVR8O9v/6TiT5eU3axzv1wo:Pub49/6TiQzv1X
Score1/10 -
-
-
Target
libGLESv2.dll
-
Size
7.2MB
-
MD5
11afd816065727c388c9331f5a9d5170
-
SHA1
fd6c86434ccc3aed6502003907aad8a9bbed9064
-
SHA256
d1209f7f8fb2fe08ea5c6fbf2be4a38704355b5b384bdb66b299def91be177ce
-
SHA512
7104c8fa85e47f16a2a9dd32a7ea3282cee114b64fbf03d18de7fdd0bfcebc0bdfa564f61e1f016a59c6e6510ca09988414e8f093ac4c5eec89829ee8545994a
-
SSDEEP
98304:kuT3g23jeZ/02YPuLaw5RoD1rfEQ3CPdOEabcgsOMld:kuDPTwLap14QzEijsvd
Score1/10 -
-
-
Target
resources/app.asar
-
Size
5.8MB
-
MD5
3995e8305e71d3815e06ce8a07e3ff4d
-
SHA1
08d6ee75fa8196e031a19acb29ad288c348ec725
-
SHA256
368bd6f557f6df646bf24aa1dfd5dfc31ffbbbb687e8bc6a026ef619af020827
-
SHA512
a6310b90fa585b506bb539c84cced2f8b53e380399c8e10d7ef3ab9f2e62a5ab048a1a5b0107d5e4a1d6f4f0d79fff2e026e018eadc8537a25b922e5a521a105
-
SSDEEP
98304:5nJ1orWxUrKym/SpoMtNGPiOzZx3GcDTyMUQ2Y4nrnVtCvy:5nz4rGMUiOzacw1yvy
Score1/10 -
-
-
Target
resources/assets/updater/updater.html
-
Size
423B
-
MD5
80ca9f9545a5cb816ec202c5ac7cc6d8
-
SHA1
383035241b86667aa8cc192d675706974e89eeef
-
SHA256
6ab2c4f63e9c6fb6b29315b9a0909f0977d935e61027603dc4773f1f673848ab
-
SHA512
a78d8c9ae1cc2e40a113c1843bb03efe7a09ab1125338681a580bf2457efa582a3c4c72c61b3a3e06849d9fe200a2005648ac8276533f583abf7fe03eb8a786a
Score1/10 -
-
-
Target
resources/assets/updater/updater.js
-
Size
606B
-
MD5
83b1bf75fece90a4c4c38666c825446a
-
SHA1
b84e504367405feeef33d136d7b6e5f43cbcd8aa
-
SHA256
8f27a967789167ec390e233e30dfb140cc0db66260fa786e725b074402a4621d
-
SHA512
d5808d242367151f7fab672313f9ac4f976a4f437b9f9a8b441f0322cc1cde922a74ef9f82ad2200bafd6793b270f6382ff858dd51e67ab7f9c363a76202277b
Score1/10 -
-
-
Target
resources/elevate.exe
-
Size
105KB
-
MD5
792b92c8ad13c46f27c7ced0810694df
-
SHA1
d8d449b92de20a57df722df46435ba4553ecc802
-
SHA256
9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
-
SHA512
6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
-
SSDEEP
3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
Score1/10 -
-
-
Target
vk_swiftshader.dll
-
Size
5.0MB
-
MD5
c3910a9fed38daf90b54b78ba39d0d40
-
SHA1
6e702fdea3d2989aadab102a2da6d3005cc135d2
-
SHA256
4a9ca5adbfdb3fd2cee0be0cef83ad21bfd8239d8ea0f8ef9849b8cf879d2d02
-
SHA512
65b72e9a209ead1a43344731163f39a3d05952b219c8bcc720d1256cc8adfadf938055a322ea951bf1a40172e12809fd487937a20df0c67d0497f671e1626ba0
-
SSDEEP
49152:eG7ixZvPbWjIXTFy1RYQZHJvuZBiDTwgvsrt5/PXd0kpmaN+WUf4CvB25zT7RCAt:b7iDPqjvzO1Lhgf49zT7grg4
Score1/10 -
-
-
Target
vulkan-1.dll
-
Size
899KB
-
MD5
9fdd70361cc0dcf3fda2020cad415b94
-
SHA1
94b6329920e8a70c5dca2d807401440ebea3e96a
-
SHA256
43b0db2ecb8147f6183021243f8cf233367c2689b601252834c20690ad092c97
-
SHA512
12214d8fc2af9ffac9dfa52eda2965e12a8f657eada8e70ff473a8c0d4f345e44740c0550d4f462ecec758ddb635d781368e9cf5f19098ff0eea872cf1a9db1a
-
SSDEEP
24576:IR9nl1crwjLAQw6Z5WUDYsH56g3P0zAk7:IR1l1culw6Z5WUDYsH56g3P0zAk7
Score1/10 -