Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3Exstora_v_2.1_en.exe
windows7-x64
3Exstora_v_2.1_en.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3Exstora.exe
windows7-x64
1Exstora.exe
windows10-2004-x64
1Uninstall.exe
windows7-x64
7Uninstall.exe
windows10-2004-x64
7exstora.chm
windows7-x64
1exstora.chm
windows10-2004-x64
1lang.dll
windows7-x64
1lang.dll
windows10-2004-x64
1新云软件.url
windows7-x64
1新云软件.url
windows10-2004-x64
1General
-
Target
f2e659595d7ad7258ce87df5b188c346_JaffaCakes118
-
Size
335KB
-
Sample
240416-hbfsfsbd67
-
MD5
f2e659595d7ad7258ce87df5b188c346
-
SHA1
51c6a7b3595397e505d8d4f6de8a9835406a3b15
-
SHA256
1fa7530d96fea5b5ef835a33144726ea2cc3ac31f77a2960a1178921969f2f26
-
SHA512
539a0c08d24cc21aaa55c69a8f639a54a19a8cd20c421c38ff78f824d8b6b77f5593b981de92b88c5d69474b6d945fd484bdee3aac906400b3400645b67be22c
-
SSDEEP
6144:p+IOgmrPBHjUYQPa8tuTuzgvWYYLBVZTBlQPUOev/iP7eTFGR2o5l3zw0ABiX3bm:p6g0UxawuTuEv6VrlQi/ESG8ml3CiXS
Static task
static1
Behavioral task
behavioral1
Sample
Exstora_v_2.1_en.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Exstora_v_2.1_en.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
Exstora.exe
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
Exstora.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
Uninstall.exe
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
Uninstall.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
exstora.chm
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
exstora.chm
Resource
win10v2004-20240412-en
Behavioral task
behavioral11
Sample
lang.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
lang.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral13
Sample
新云软件.url
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
新云软件.url
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
Exstora_v_2.1_en.exe
-
Size
353KB
-
MD5
f664e10ef51de723d7170c7582a6a64c
-
SHA1
2498826984ac35e2f14cc3f1eb46aa1e4a5e8bcb
-
SHA256
407611842b4b5d14086124cc36b1493354fb57058cddd9b89ea5eed644775c0a
-
SHA512
6009362c8402efe3c62c6f08a09f125054e69d1575ea4e9b1a108892a2e4bc27e0e970a53b19d8db5d75667fa5e0ce3132537329f08deb50cc42d8b96a357f58
-
SSDEEP
6144:0X5v0RyNV7ctOXkBeqvX7RUqS0b/PEK80e2f/bCh/jAHdKY:Yv+gBctOXkBTRx/G0Lf/bYA8Y
Score3/10 -
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
14KB
-
MD5
f62d03fcb1473110e920a9bb2c701006
-
SHA1
c48444ef2daa60dcdf91f1645cd4ecd8e66545f7
-
SHA256
17e2f205af12d5a86638dc83c95fc69199c41af2fa6daeb1e91ec330f68c5372
-
SHA512
701d531d405d08054d53298141d5bbd56e74df7b22bcea5f9f0e5c4407421ea0ca9617aa84e740dc1dc44e6d14e58852c1ca2087213cc2319f2da44eaed0bc05
-
SSDEEP
192:g6JaVGQ+xI5EeuyvMmGpeWH2J5xprN+AxTxK72dwF7dBdcQOz:g6JaVh4I5rpPbTx+BdhO
Score3/10 -
-
-
Target
Exstora.exe
-
Size
236KB
-
MD5
4dd3d86d39f8cfd5bce874f5433da93d
-
SHA1
347d84a17852298f597a5fcc0656709b73a67d99
-
SHA256
481f7b11d4538bcc07ac2aef5332b8fc1b1392677aa4f45b3268e3d280799a26
-
SHA512
2a2636cfed3a1143568f04136d3c4aba4513f458afec82fb391dbef665b52154a84ba4d9667918a0544caf58c3d12d3f3d4d512298c957cbdcafabd1446875cf
-
SSDEEP
6144:t5efpAvfkL9YvPhMgZOZQxnVQaGoI0Rxc4liy:ife3IYHhMgZQQxnKn0Re4liy
Score1/10 -
-
-
Target
Uninstall.exe
-
Size
47KB
-
MD5
0154f3e36b5d217ee63714e80154744b
-
SHA1
1f7928e142c47cc2cf0903e2b1218112297baecd
-
SHA256
da0ab9bd50f1e497306971630e2b980cd8d4a79959ca203f15e6e588093a9a3d
-
SHA512
522874f78cf03ea9a8e60ed0e85856dbb508b903ca2afbc830922185fbc64e0527e2f16abf6d7eaa18750af93353772324125e9ee4aabd715eb1b9e9e2f9708c
-
SSDEEP
768:A/UpAHiGjRQ1kkjH918xnyzOp7OssT1pF/O71mJ/6gd2iZQAm6kRRS+NoJRnek:0UeHiWRgkkjH8nyWmJCgdLeAyNxk
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
exstora.chm
-
Size
24KB
-
MD5
3c728fb3f47981cff02d7d449b255581
-
SHA1
dd618388a46c90c7b6694e2e48d1523c7df0e915
-
SHA256
7f7b22635daaa417d9c811407b7cd6792d5db5201226c265e44f4fe1cbfa2d3a
-
SHA512
437fe04ffda1e77293e3fadfd518ce7517685d9725f5ca719bcda834848290a5eca075feac3aa348bb8595bad71b86cda62805f29f0973422bf73972484af5db
-
SSDEEP
384:ue5QZX3xSDdzzALeBWE2QyDWiEmaTEjTy77Nq9Tnvm4:uG0hSDdXAWW4pvTE6Vq9Te4
Score1/10 -
-
-
Target
lang.dll
-
Size
18KB
-
MD5
ecb92250302d9a7eddc1f1a3d1050abe
-
SHA1
8060d2f2c4b80741492304809536437155d6025e
-
SHA256
c17f6701ed72f7b07d4f1f10d296c704cfed86a976b03ccc2dde393ca4e8664f
-
SHA512
c40fa05da85eaa11f09e71a148ca185b1f279f0348c621782c6fc1023b640b9b8a93435aa10d1ae7def440b2826cd9e704bd1c940e171a5bf46b6f56144debe1
-
SSDEEP
192:m6WsO841R5bqmoRaruguapjqV2rPOUCzFpjoH:m6w1LERodpj+2rPOzRp0
Score1/10 -
-
-
Target
新云软件.url
-
Size
133B
-
MD5
4f0017b3b346bd0626f0c3b915e6e734
-
SHA1
823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
-
SHA256
df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
-
SHA512
0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
Score1/10 -