Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

15450c8b27...d5.exe

windows7-x64

7

15450c8b27...d5.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

Cli_AP.dll

windows7-x64

1

Cli_AP.dll

windows10-2004-x64

1

License.rtf

windows7-x64

4

License.rtf

windows10-2004-x64

1

Samples/De...AP.dll

windows7-x64

1

Samples/De...AP.dll

windows10-2004-x64

1

Samples/De...t2.exe

windows7-x64

1

Samples/De...t2.exe

windows10-2004-x64

1

Samples/VB/Cli_AP.dll

windows7-x64

1

Samples/VB/Cli_AP.dll

windows10-2004-x64

1

Samples/VB...t1.exe

windows7-x64

1

Samples/VB...t1.exe

windows10-2004-x64

1

Samples/VC/Cli_AP.dll

windows7-x64

1

Samples/VC/Cli_AP.dll

windows10-2004-x64

1

Samples/VC...pp.exe

windows7-x64

1

Samples/VC...pp.exe

windows10-2004-x64

1

Samples/VC...p.html

windows7-x64

1

Samples/VC...p.html

windows10-2004-x64

1

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15450c8b27cd209bc640d1e07af825d5

  • Size

    409KB

  • Sample

    240409-xv4e7aac71

  • MD5

    15450c8b27cd209bc640d1e07af825d5

  • SHA1

    922dffcaf02e4d1727e6f055641d85280402e5ab

  • SHA256

    4b7abdcb2c958a551b20d87025adb7bcb12ab3fe5f063c5b10461c775e7aab8b

  • SHA512

    071891c8af8acb20734a8a7fb326242fcd0c8d899729870aeebb1053cba85e6c8cd98fa70b2ce580244f20a80996c1da491c3d15c06b1c8e3e3ac3b58457e327

  • SSDEEP

    6144:pHY6W+k+wd9gttz1Ia6wnBTulAhgDgFkrUrCmVzGGokgXHmDG/Xlixrh2CVGrlOl:JWz+wdStCwFulBTrUDMJkgXHiL9VRSg

Score
7/10

Malware Config

Targets

    • Target

      15450c8b27cd209bc640d1e07af825d5

    • Size

      409KB

    • MD5

      15450c8b27cd209bc640d1e07af825d5

    • SHA1

      922dffcaf02e4d1727e6f055641d85280402e5ab

    • SHA256

      4b7abdcb2c958a551b20d87025adb7bcb12ab3fe5f063c5b10461c775e7aab8b

    • SHA512

      071891c8af8acb20734a8a7fb326242fcd0c8d899729870aeebb1053cba85e6c8cd98fa70b2ce580244f20a80996c1da491c3d15c06b1c8e3e3ac3b58457e327

    • SSDEEP

      6144:pHY6W+k+wd9gttz1Ia6wnBTulAhgDgFkrUrCmVzGGokgXHmDG/Xlixrh2CVGrlOl:JWz+wdStCwFulBTrUDMJkgXHiL9VRSg

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      12KB

    • MD5

      4c7d97d0786ff08b20d0e8315b5fc3cb

    • SHA1

      bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c

    • SHA256

      75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84

    • SHA512

      f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a

    • SSDEEP

      192:6KdqJ4Bhf1mdCMI26t510swClJOeFIsm7F1QuPs:6KdE4zAddwR0swqOeFxu

    Score
    3/10
    behavioral3behavioral4

    • Target

      Cli_AP.dll

    • Size

      196KB

    • MD5

      29feb5f8046ff3d3c8d68a27da2ea5cb

    • SHA1

      a4cf45d89819dc9e8a3d0fa7f97ee51be3017314

    • SHA256

      429778464bd0211a808d95d8dd3bb5fb49226aaf93061c67f211cbcc7c04f444

    • SHA512

      7b70e7d66001edfe65de3910e6af1cb6491934b8e843ed30397880fafc4c6faa8f59a98537c58ab08e43db08b2430efdc09283de24e886fc7e1fa55a0a54f2a0

    • SSDEEP

      3072:i/ucoihhiw18ZOu5xbfNYoW8T5LLIJUlU:iKiyc8Zj5Sd

    Score
    1/10
    behavioral5behavioral6

    • Target

      License.rtf

    • Size

      19KB

    • MD5

      713bc8555aed185178342018f82ce736

    • SHA1

      f02768b26923953ff29135e2022c16ac5350e0b5

    • SHA256

      f2e2710648d703939560ef3eed1aa99b8b2f738f983dd28ee2d74bcc4546565b

    • SHA512

      6afd33612be3dd594128ae9b822127f771e458e55561f09fc3a334ea3de2afdf17e2320a561aa290145fef722737752dc7f71bbe3258760bd55f8b342e6321a3

    • SSDEEP

      192:W9i+FQFVrxwjJp3c2s/HSklLyDhU1lA/fxulqSOiA4T:W9pFQFVW3Ls6UrSxusLif

    Score
    4/10
    behavioral7behavioral8

    • Target

      Samples/Delphi/Cli_AP.dll

    • Size

      196KB

    • MD5

      29feb5f8046ff3d3c8d68a27da2ea5cb

    • SHA1

      a4cf45d89819dc9e8a3d0fa7f97ee51be3017314

    • SHA256

      429778464bd0211a808d95d8dd3bb5fb49226aaf93061c67f211cbcc7c04f444

    • SHA512

      7b70e7d66001edfe65de3910e6af1cb6491934b8e843ed30397880fafc4c6faa8f59a98537c58ab08e43db08b2430efdc09283de24e886fc7e1fa55a0a54f2a0

    • SSDEEP

      3072:i/ucoihhiw18ZOu5xbfNYoW8T5LLIJUlU:iKiyc8Zj5Sd

    Score
    1/10
    behavioral10behavioral9

    • Target

      Samples/Delphi/Project2.exe

    • Size

      371KB

    • MD5

      1b7aaf0b292211e27f1a763becdb63cb

    • SHA1

      117346a2c5b04264a1462e66b2c65448b5e3841e

    • SHA256

      61bf0c379cd1f1b81c01d77a18be424b3d007e61e7fcd25680583c540fcf482a

    • SHA512

      cd59f88b103a26868590659f4474648d5b81992194b88cea1802d100b757522d25648320639c6247cd86ece1fb84be868bba717b0b5f18e0429b9dcfe87f1dc8

    • SSDEEP

      6144:Iz4RJu3yqJBTuTyQu1RZTltXW/a/fSQJpPlh/hlWPemO0X:LRJu3yqJBTEJQTlGgfSihEGN0

    Score
    1/10
    behavioral11behavioral12

    • Target

      Samples/VB/Cli_AP.dll

    • Size

      196KB

    • MD5

      29feb5f8046ff3d3c8d68a27da2ea5cb

    • SHA1

      a4cf45d89819dc9e8a3d0fa7f97ee51be3017314

    • SHA256

      429778464bd0211a808d95d8dd3bb5fb49226aaf93061c67f211cbcc7c04f444

    • SHA512

      7b70e7d66001edfe65de3910e6af1cb6491934b8e843ed30397880fafc4c6faa8f59a98537c58ab08e43db08b2430efdc09283de24e886fc7e1fa55a0a54f2a0

    • SSDEEP

      3072:i/ucoihhiw18ZOu5xbfNYoW8T5LLIJUlU:iKiyc8Zj5Sd

    Score
    1/10
    behavioral13behavioral14

    • Target

      Samples/VB/Project1.exe

    • Size

      24KB

    • MD5

      b91c70ed437ecc58b0f070f73b3c3abb

    • SHA1

      13a5456fbe3a76510fa539fa7d7c4c4f4a87c246

    • SHA256

      83e072c6b61af3bc63f1e4611b6b060ff62c0e2dd99e16250787be7fdfedd1f2

    • SHA512

      80a0367638cb982e76478056530a83c3aee15187dccee6d2ed4ac21f52d4f7368e68495ad9766de7c5ff8350bb53c9783da68d6b9cb4f4f3b282163cccd533b6

    • SSDEEP

      192:hcSscfjafPVYP7Q7TNXk9ToeVVZMHNKD2oI:1TgTm9ToeVoHNKD2oI

    Score
    1/10
    behavioral15behavioral16

    • Target

      Samples/VC/Cli_AP.dll

    • Size

      196KB

    • MD5

      29feb5f8046ff3d3c8d68a27da2ea5cb

    • SHA1

      a4cf45d89819dc9e8a3d0fa7f97ee51be3017314

    • SHA256

      429778464bd0211a808d95d8dd3bb5fb49226aaf93061c67f211cbcc7c04f444

    • SHA512

      7b70e7d66001edfe65de3910e6af1cb6491934b8e843ed30397880fafc4c6faa8f59a98537c58ab08e43db08b2430efdc09283de24e886fc7e1fa55a0a54f2a0

    • SSDEEP

      3072:i/ucoihhiw18ZOu5xbfNYoW8T5LLIJUlU:iKiyc8Zj5Sd

    Score
    1/10
    behavioral17behavioral18

    • Target

      Samples/VC/TestApp.exe

    • Size

      36KB

    • MD5

      aeed7a338de82977ca666a1a2950fccb

    • SHA1

      3b86dd54ce1e53e3dffec5ee923ae31afc7dae29

    • SHA256

      56c65f90e99ce91342bcdbc918f0130a18ae6ef4922a5cfdbe34267c90195a59

    • SHA512

      85cef302a1256d951f9600e328be81db1e85db0280ef06f9e3af18ac103b22822cbde3559aa576a7a1b024d92269bb3f09f135fbf465cf6ea668fb21a65d869b

    • SSDEEP

      192:GJKlLHQC170RqJNJNnT3qYXOVbroTVwOVlt1oynWcmXe/gH9M5tWdBvJGNI6wClF:m8htHJw8j17mTditKvJp/md

    Score
    1/10
    behavioral19behavioral20

    • Target

      Samples/VC/TestApp.plg

    • Size

      2KB

    • MD5

      aed787ef99ae1d65ab810f75406e7b6e

    • SHA1

      8b23f7bd25122289c4ba6aa69d1926e17c885113

    • SHA256

      a8c9b63a32597c36dec41b97fa0d945ff320f885b576dd27c43814fdd446e56f

    • SHA512

      534a84a250d44a871fd885ca100c8f9170d587872e1bc34b05f5b75b7ba3e12140bd430c9fe7318307d9a9ea17dfacbda486bcdc73f0f00d960aa6ca3b9acd72

    Score
    1/10
    behavioral21behavioral22

    • Target

      uninst.exe

    • Size

      47KB

    • MD5

      549d3ff47b507c778472a8712c063325

    • SHA1

      eb8d8989985b4858a77cf7fa192c8e3ca860eee1

    • SHA256

      152bc776f432a9accab23077ec6d4d18b16b013ce556909f8ec31b86d7df7052

    • SHA512

      2329144a2f149bd0c7031faff635427a9cd3c766fc7860df480cc76f795d846c962085eba420c471be7847d01d3ac214558b1cba0650deb989f9d332082b3eae

    • SSDEEP

      768:Z7e0D3XjRal6bOS90v2iMrTxRX0I666Sr2ZvMjBtL3MBJoT+eJRn5Am6kRRJ2iZY:de0DnjRrJav2FnUIRr2vMYBJpqAELVix

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral23behavioral24

MITRE ATT&CK Enterprise v15

Tasks