Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
6Static
static
3Everything...up.exe
windows7-x64
4Everything...up.exe
windows10-2004-x64
4$PLUGINSDI...ng.exe
windows7-x64
6$PLUGINSDI...ng.exe
windows10-2004-x64
6$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3Koid Ghost Client.exe
windows7-x64
Koid Ghost Client.exe
windows10-2004-x64
General
-
Target
Desktop.zip
-
Size
2.9MB
-
Sample
240410-qvs6wshe39
-
MD5
19efee8332107b4cdac0d97e4d5a9dda
-
SHA1
a04eb80d67c6762c45b114b423a307dd46af857e
-
SHA256
6ab812af61c38d2196161ff9656a5b1ed45b91cb53b428a8a4182a8d8310503b
-
SHA512
ea8fb26f963747d06f69460fe917b32ffa065becd8d62936c0bb95543b3199dfaedb467edc2fec7647832059c051ce8eb84bc7b1a003494caf570951e34ff830
-
SSDEEP
49152:j4419+6vdyeKeCM2Vs0K9ez9IEdW3N7tGvv89i1bjNDPPT5u+OmJ:j4U9xz2Vs0K9ez9I57tKgGbjNrT5cmJ
Static task
static1
Behavioral task
behavioral1
Sample
Everything-1.4.1.1024.x64.Lite-Setup.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
Everything-1.4.1.1024.x64.Lite-Setup.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Everything/Everything.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Everything/Everything.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240319-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
Koid Ghost Client.exe
Resource
win7-20240215-en
Behavioral task
behavioral12
Sample
Koid Ghost Client.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
Everything-1.4.1.1024.x64.Lite-Setup.exe
-
Size
1.8MB
-
MD5
7989e22fdeb7948522c62e892bc20799
-
SHA1
8d2d3659361f75f4a0e0aab9af354a5948073b44
-
SHA256
aa18cc853e5ee501ed52db95276f5b5fad6a35ebe428d80576ebef47d57d745b
-
SHA512
534ddb1250b0f3a6dcccb82c5c1f3a9bbf84ce70120518e1f30a2ac9b84c5be8e0b53d18217b3277fa5e0a626144bd94a33bbf14754ad5f18ad8fe1564d63db8
-
SSDEEP
24576:kY4M88/jNdi37rwRapKjz0PczYV+HOz/K5IjqRhm9mbWd4xceARcJDtsKllHTmzm:t46di37rJEdt8TeTbb/Dxnzj2II2P
Score4/10 -
-
-
Target
$PLUGINSDIR/Everything/Everything.exe
-
Size
2.1MB
-
MD5
35f0f0888d0d7b5b879d672910f20d9b
-
SHA1
4e32c69d50a178b4587b90265ba748dd854dec5d
-
SHA256
9ee15ecf32fcc4838a8369f5ee3d0c8d7dea4708526cbb158f3e5cb39f2f7b41
-
SHA512
8d3e61d0a270f7928d71e2ba18db282d42404da652eaef87e1918a68e7c5c3d9256b3ad8189e17e1a8ef289c45f58825bb37f77cc652f48695dc155d511248a1
-
SSDEEP
49152:6QwV6orrDVSr1g+Q8hnkqI/DlpJ2inRH0hNrp:6QeSpJ7+DLEhNl
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
15KB
-
MD5
ece25721125d55aa26cdfe019c871476
-
SHA1
b87685ae482553823bf95e73e790de48dc0c11ba
-
SHA256
c7fef6457989d97fecc0616a69947927da9d8c493f7905dc8475c748f044f3cf
-
SHA512
4e384735d03c943f5eb3396bb3a9cb42c9d8a5479fe2871de5b8bc18db4bbd6e2c5f8fd71b6840512a7249e12a1c63e0e760417e4baa3dc30f51375588410480
-
SSDEEP
384:EXsC43tPegZ3eBaRwCPOYY7nNYXC06/Yosa:EXJTgZ3eBTCmrnNA5p
Score3/10 -
-
-
Target
$PLUGINSDIR/LangDLL.dll
-
Size
5KB
-
MD5
68b287f4067ba013e34a1339afdb1ea8
-
SHA1
45ad585b3cc8e5a6af7b68f5d8269c97992130b3
-
SHA256
18e8b40ba22c7a1687bd16e8d585380bc2773fff5002d7d67e9485fcc0c51026
-
SHA512
06c38bbb07fb55256f3cdc24e77b3c8f3214f25bfd140b521a39d167113bf307a7e8d24e445d510bc5e4e41d33c9173bb14e3f2a38bc29a0e3d08c1f0dca4bdb
-
SSDEEP
48:S46+/nTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mFofjLl:zFuPbOBtWZBV8jAWiAJCdv2Cm0L
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
12KB
-
MD5
cff85c549d536f651d4fb8387f1976f2
-
SHA1
d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
-
SHA256
8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
-
SHA512
531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
-
SSDEEP
192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
Score3/10 -
-
-
Target
Koid Ghost Client.exe
-
Size
1.7MB
-
MD5
4d209e1877a371f1a6a22b1c41c3a59c
-
SHA1
a3bd7683bd9bf0b79ccc9f4d26af103137226ceb
-
SHA256
d97c80478b0ff54ce7ac9c1d33360da3a21f64c0aa3df39bc5e93560a32b5f6a
-
SHA512
b13d734fe4feba2c9addc6965491e6f4030411fd3f456134bb2319c3fd9a6a0236999abbc2916e1a5fbaaf4b7f786cceb3ae34e71f45c1d86e8520bfc70c218e
-
SSDEEP
24576:07FUDowAyrTVE3U5F/dGqKVKic6QL3E2vVsjECUAQT45deRV9RJ:0BuZrEUQPKIy029s4C1eH9/
Score1/10 -