Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
6Static
static
3SophiApp.zip
windows11-21h2-x64
6SophiApp/B...sm.dll
windows11-21h2-x64
6SophiApp/B...er.dll
windows11-21h2-x64
1SophiApp/B...on.dll
windows11-21h2-x64
1SophiApp/B...on.dll
windows11-21h2-x64
1SophiApp/B...ws.dll
windows11-21h2-x64
1SophiApp/SophiApp.exe
windows11-21h2-x64
1SophiApp/S...config
windows11-21h2-x64
3General
-
Target
SophiApp.zip
-
Size
3.3MB
-
Sample
240417-stqeqafc81
-
MD5
499e6e4c950002919508027066fc2615
-
SHA1
6d49f4f793c87ed1498e4a23888d025118109a18
-
SHA256
621226b572dcaa91d44e36450f82fcf28fce052dff5770d50b3f628987f59291
-
SHA512
700ddedb488335abe4bb834d5046c4de6f95e344be361c5ece868598e0178b0e11b3e461c2979f219eb7bb978fe9487e1bb95317f9d9c3590a52f9f2c6b24a67
-
SSDEEP
98304:yVWwc1nmWVIazWWgRsjBGsGuAZ6FzmpU2:yo515RWxoELZW2
Static task
static1
Behavioral task
behavioral1
Sample
SophiApp.zip
Resource
win11-20240412-en
Behavioral task
behavioral2
Sample
SophiApp/Bin/Microsoft.Dism.dll
Resource
win11-20240412-en
Behavioral task
behavioral3
Sample
SophiApp/Bin/Microsoft.Win32.TaskScheduler.dll
Resource
win11-20240412-en
Behavioral task
behavioral4
Sample
SophiApp/Bin/Newtonsoft.Json.dll
Resource
win11-20240412-en
Behavioral task
behavioral5
Sample
SophiApp/Bin/System.Management.Automation.dll
Resource
win11-20240412-en
Behavioral task
behavioral6
Sample
SophiApp/Bin/Windows.dll
Resource
win11-20240412-en
Behavioral task
behavioral7
Sample
SophiApp/SophiApp.exe
Resource
win11-20240412-en
Behavioral task
behavioral8
Sample
SophiApp/SophiApp.exe.config
Resource
win11-20240412-en
Malware Config
Targets
-
-
Target
SophiApp.zip
-
Size
3.3MB
-
MD5
499e6e4c950002919508027066fc2615
-
SHA1
6d49f4f793c87ed1498e4a23888d025118109a18
-
SHA256
621226b572dcaa91d44e36450f82fcf28fce052dff5770d50b3f628987f59291
-
SHA512
700ddedb488335abe4bb834d5046c4de6f95e344be361c5ece868598e0178b0e11b3e461c2979f219eb7bb978fe9487e1bb95317f9d9c3590a52f9f2c6b24a67
-
SSDEEP
98304:yVWwc1nmWVIazWWgRsjBGsGuAZ6FzmpU2:yo515RWxoELZW2
Score6/10-
Legitimate hosting services abused for malware hosting/C2
-
-
-
Target
SophiApp/Bin/Microsoft.Dism.dll
-
Size
55KB
-
MD5
e7e242e90b50fdbec0653b5485535433
-
SHA1
8f214e90e8e69faf0f5a3fa0bb9ee22b0ba48e3b
-
SHA256
ac6b01b934d3a1a316920c723d11342c0bd17f135a10abde8a3e7fcc66faa795
-
SHA512
371f3d135e48c82feee41d9212d9961946754df73b4c1f2a111b97c73a38e2a5f812a1507dc01129913dd63fea690369ee19a99b66e5430f132d149a899f930e
-
SSDEEP
768:dyU0jeS30Rc89H858Ghc3CRTWaJqC9EU96d1YSKlbGNHB1mNWcksXpq9MbXblqN:dyU8P2858FTNh1nc/M9MbXhqN
Score6/10-
Legitimate hosting services abused for malware hosting/C2
-
-
-
Target
SophiApp/Bin/Microsoft.Win32.TaskScheduler.dll
-
Size
326KB
-
MD5
a844ac745a4005fbd3f51d79ff88583c
-
SHA1
92671774fd4be9781a77d2788a8dddbf8981ead5
-
SHA256
74fe1a6a1e36be7d893e31bbb4d4bd83bf4b927e715276cd5607982139818ebd
-
SHA512
5f0734058d9146ffeb552abf443df5097cf134a4737bed499467830e08d97f5d1996c1f1647c5c12289ca4d4209effd480010afebc59d50290d4ca7d45bb41f8
-
SSDEEP
3072:o1sSJApTSnQU/x0ImhuDzHfs4zbYOjujDRfygDgKQINXLLHIaKlay8weCycJ5Dfm:o1sSmRIt/xhtsOju1DH5NXnIKAc
Score1/10 -
-
-
Target
SophiApp/Bin/Newtonsoft.Json.dll
-
Size
695KB
-
MD5
195ffb7167db3219b217c4fd439eedd6
-
SHA1
1e76e6099570ede620b76ed47cf8d03a936d49f8
-
SHA256
e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
-
SHA512
56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
-
SSDEEP
12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
Score1/10 -
-
-
Target
SophiApp/Bin/System.Management.Automation.dll
-
Size
1.5MB
-
MD5
65fcba64ac6ac358eefdfe1c791cb73d
-
SHA1
8bb694c31bebc555cab69f4922a0b19424c7fb84
-
SHA256
8bc6ce448895ad6cd516097c5cb19331fcfec76619487206cd372f3d5bbab8d1
-
SHA512
fc21526cf4a5d9fd204370c42ea6d2e856a48d3f090653a07d3be303c67725c2d6b97fd0873ef5f61531430a63343b4518485f9423d5b6a32eb843ddebb22883
-
SSDEEP
49152:IEMpYaFs3T7+a56c1KwDivXcSGukSaxPGSM8wgA:IHH
Score1/10 -
-
-
Target
SophiApp/Bin/Windows.winmd
-
Size
6.6MB
-
MD5
68bd45c9f26a7cfcd4cc9be2f2d79034
-
SHA1
0060ed4f1845e46ecfd6c0a558d17a86c699093a
-
SHA256
4aae59a25f02cd69b825f94085fb9f13ff2ffbd25a37b62eb31aec527ffe2f1c
-
SHA512
7de892abfeee21f2c0bf85febae96b7b773d14121b0e6a282efff16e9d0931855826b59942ac931ba1f91fa5f3ac871fa4856f692e624b43949cb95efc39bbe0
-
SSDEEP
49152:+1lXg7V5aXrOX2JHRtKhMEAjx7SGjdgE22I8ZtOXgkstoK/FO37Rq9:elcVqOX2JHR1jAOgEPE4
Score1/10 -
-
-
Target
SophiApp/SophiApp.exe
-
Size
2.1MB
-
MD5
369ec48a16bc4d262fb48bcb0e881929
-
SHA1
a9409c76f28fcdd11815470e6835c3201d0c4e61
-
SHA256
262e93a353d3c4b2a89174a9a2571b2ed648735f53c49289d84228ba648ef274
-
SHA512
58671a4db37c76d36ac8922f455f13d9a589fa3ed6613bed562d7714269f5bfe5fc259ee7767883a527fe4b08c627bf1642bdd35c986068616137e221e3413af
-
SSDEEP
12288:IvVXHw9pUHDVVyMpUduHRz3iwcqB76YmtC0+jTb5neyIYQrDRaoRa4b83iwcqB7b:kHw9yHDVVyMOuHqxDRaoRa4b95u
Score1/10 -
-
-
Target
SophiApp/SophiApp.exe.config
-
Size
334B
-
MD5
604e343d4d0423a4ecfeb910db027c00
-
SHA1
2ce24a50763f5f934ae042bc9de00b6bd4778946
-
SHA256
639706e4059ef2dbabf7a568cca4d223619d0a11a9663179405ad798344e1d23
-
SHA512
116754d5b101047b0ee978536de2dc3626deea3f60482dcbb408a61822af95d1cc6a9de3ad16bf24d100f0d925383f8ce7fb10a2221ae94da2aaffdfdf0533ec
Score3/10 -