Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

SophiApp.zip

windows11-21h2-x64

6

SophiApp/B...sm.dll

windows11-21h2-x64

6

SophiApp/B...er.dll

windows11-21h2-x64

1

SophiApp/B...on.dll

windows11-21h2-x64

1

SophiApp/B...on.dll

windows11-21h2-x64

1

SophiApp/B...ws.dll

windows11-21h2-x64

1

SophiApp/SophiApp.exe

windows11-21h2-x64

1

SophiApp/S...config

windows11-21h2-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SophiApp.zip

  • Size

    3.3MB

  • Sample

    240417-stqeqafc81

  • MD5

    499e6e4c950002919508027066fc2615

  • SHA1

    6d49f4f793c87ed1498e4a23888d025118109a18

  • SHA256

    621226b572dcaa91d44e36450f82fcf28fce052dff5770d50b3f628987f59291

  • SHA512

    700ddedb488335abe4bb834d5046c4de6f95e344be361c5ece868598e0178b0e11b3e461c2979f219eb7bb978fe9487e1bb95317f9d9c3590a52f9f2c6b24a67

  • SSDEEP

    98304:yVWwc1nmWVIazWWgRsjBGsGuAZ6FzmpU2:yo515RWxoELZW2

Score
6/10

Malware Config

Targets

    • Target

      SophiApp.zip

    • Size

      3.3MB

    • MD5

      499e6e4c950002919508027066fc2615

    • SHA1

      6d49f4f793c87ed1498e4a23888d025118109a18

    • SHA256

      621226b572dcaa91d44e36450f82fcf28fce052dff5770d50b3f628987f59291

    • SHA512

      700ddedb488335abe4bb834d5046c4de6f95e344be361c5ece868598e0178b0e11b3e461c2979f219eb7bb978fe9487e1bb95317f9d9c3590a52f9f2c6b24a67

    • SSDEEP

      98304:yVWwc1nmWVIazWWgRsjBGsGuAZ6FzmpU2:yo515RWxoELZW2

    Score
    6/10

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

    • Target

      SophiApp/Bin/Microsoft.Dism.dll

    • Size

      55KB

    • MD5

      e7e242e90b50fdbec0653b5485535433

    • SHA1

      8f214e90e8e69faf0f5a3fa0bb9ee22b0ba48e3b

    • SHA256

      ac6b01b934d3a1a316920c723d11342c0bd17f135a10abde8a3e7fcc66faa795

    • SHA512

      371f3d135e48c82feee41d9212d9961946754df73b4c1f2a111b97c73a38e2a5f812a1507dc01129913dd63fea690369ee19a99b66e5430f132d149a899f930e

    • SSDEEP

      768:dyU0jeS30Rc89H858Ghc3CRTWaJqC9EU96d1YSKlbGNHB1mNWcksXpq9MbXblqN:dyU8P2858FTNh1nc/M9MbXhqN

    Score
    6/10

    • Legitimate hosting services abused for malware hosting/C2

    behavioral2

    • Target

      SophiApp/Bin/Microsoft.Win32.TaskScheduler.dll

    • Size

      326KB

    • MD5

      a844ac745a4005fbd3f51d79ff88583c

    • SHA1

      92671774fd4be9781a77d2788a8dddbf8981ead5

    • SHA256

      74fe1a6a1e36be7d893e31bbb4d4bd83bf4b927e715276cd5607982139818ebd

    • SHA512

      5f0734058d9146ffeb552abf443df5097cf134a4737bed499467830e08d97f5d1996c1f1647c5c12289ca4d4209effd480010afebc59d50290d4ca7d45bb41f8

    • SSDEEP

      3072:o1sSJApTSnQU/x0ImhuDzHfs4zbYOjujDRfygDgKQINXLLHIaKlay8weCycJ5Dfm:o1sSmRIt/xhtsOju1DH5NXnIKAc

    Score
    1/10
    behavioral3

    • Target

      SophiApp/Bin/Newtonsoft.Json.dll

    • Size

      695KB

    • MD5

      195ffb7167db3219b217c4fd439eedd6

    • SHA1

      1e76e6099570ede620b76ed47cf8d03a936d49f8

    • SHA256

      e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d

    • SHA512

      56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac

    • SSDEEP

      12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/

    Score
    1/10
    behavioral4

    • Target

      SophiApp/Bin/System.Management.Automation.dll

    • Size

      1.5MB

    • MD5

      65fcba64ac6ac358eefdfe1c791cb73d

    • SHA1

      8bb694c31bebc555cab69f4922a0b19424c7fb84

    • SHA256

      8bc6ce448895ad6cd516097c5cb19331fcfec76619487206cd372f3d5bbab8d1

    • SHA512

      fc21526cf4a5d9fd204370c42ea6d2e856a48d3f090653a07d3be303c67725c2d6b97fd0873ef5f61531430a63343b4518485f9423d5b6a32eb843ddebb22883

    • SSDEEP

      49152:IEMpYaFs3T7+a56c1KwDivXcSGukSaxPGSM8wgA:IHH

    Score
    1/10
    behavioral5

    • Target

      SophiApp/Bin/Windows.winmd

    • Size

      6.6MB

    • MD5

      68bd45c9f26a7cfcd4cc9be2f2d79034

    • SHA1

      0060ed4f1845e46ecfd6c0a558d17a86c699093a

    • SHA256

      4aae59a25f02cd69b825f94085fb9f13ff2ffbd25a37b62eb31aec527ffe2f1c

    • SHA512

      7de892abfeee21f2c0bf85febae96b7b773d14121b0e6a282efff16e9d0931855826b59942ac931ba1f91fa5f3ac871fa4856f692e624b43949cb95efc39bbe0

    • SSDEEP

      49152:+1lXg7V5aXrOX2JHRtKhMEAjx7SGjdgE22I8ZtOXgkstoK/FO37Rq9:elcVqOX2JHR1jAOgEPE4

    Score
    1/10
    behavioral6

    • Target

      SophiApp/SophiApp.exe

    • Size

      2.1MB

    • MD5

      369ec48a16bc4d262fb48bcb0e881929

    • SHA1

      a9409c76f28fcdd11815470e6835c3201d0c4e61

    • SHA256

      262e93a353d3c4b2a89174a9a2571b2ed648735f53c49289d84228ba648ef274

    • SHA512

      58671a4db37c76d36ac8922f455f13d9a589fa3ed6613bed562d7714269f5bfe5fc259ee7767883a527fe4b08c627bf1642bdd35c986068616137e221e3413af

    • SSDEEP

      12288:IvVXHw9pUHDVVyMpUduHRz3iwcqB76YmtC0+jTb5neyIYQrDRaoRa4b83iwcqB7b:kHw9yHDVVyMOuHqxDRaoRa4b95u

    Score
    1/10
    behavioral7

    • Target

      SophiApp/SophiApp.exe.config

    • Size

      334B

    • MD5

      604e343d4d0423a4ecfeb910db027c00

    • SHA1

      2ce24a50763f5f934ae042bc9de00b6bd4778946

    • SHA256

      639706e4059ef2dbabf7a568cca4d223619d0a11a9663179405ad798344e1d23

    • SHA512

      116754d5b101047b0ee978536de2dc3626deea3f60482dcbb408a61822af95d1cc6a9de3ad16bf24d100f0d925383f8ce7fb10a2221ae94da2aaffdfdf0533ec

    Score
    3/10
    behavioral8

MITRE ATT&CK Enterprise v15

Tasks