Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Silent Client Setup 4.1.1.exe

  • Size

    69.9MB

  • Sample

    240420-zwp1ashh49

  • MD5

    352646f0b563824510222700fee8bb22

  • SHA1

    2ab0863b65fb9e699634bdab6db4f5bd6fbdc52f

  • SHA256

    e10e4e255af0ba3293aed0222096b70d627a0a8217f1d3d76c2d6813e3074144

  • SHA512

    4970c1b463febbb5ce375268fb12d413290bcf56e0ffa0a24ccc2b4fcee33fa0973cfd86ed2e772e16c88cd6aacdd1c08bd2d488206a8198abc86f9b6939b38a

  • SSDEEP

    1572864:QwnjRkJ7cQG4Cfwn3Hi0MoXGeLxwTR5Tlpl+YfYVD9bIHIjyshvOWUMT+0:QERdQ133MG3STzRpQYfKD1jR2FMTZ

Score
7/10

Malware Config

Targets

    • Target

      Silent Client Setup 4.1.1.exe

    • Size

      69.9MB

    • MD5

      352646f0b563824510222700fee8bb22

    • SHA1

      2ab0863b65fb9e699634bdab6db4f5bd6fbdc52f

    • SHA256

      e10e4e255af0ba3293aed0222096b70d627a0a8217f1d3d76c2d6813e3074144

    • SHA512

      4970c1b463febbb5ce375268fb12d413290bcf56e0ffa0a24ccc2b4fcee33fa0973cfd86ed2e772e16c88cd6aacdd1c08bd2d488206a8198abc86f9b6939b38a

    • SSDEEP

      1572864:QwnjRkJ7cQG4Cfwn3Hi0MoXGeLxwTR5Tlpl+YfYVD9bIHIjyshvOWUMT+0:QERdQ133MG3STzRpQYfKD1jR2FMTZ

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target

      $PLUGINSDIR/SpiderBanner.dll

    • Size

      9KB

    • MD5

      17309e33b596ba3a5693b4d3e85cf8d7

    • SHA1

      7d361836cf53df42021c7f2b148aec9458818c01

    • SHA256

      996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

    • SHA512

      1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

    • SSDEEP

      192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY

    Score
    1/10
    • Target

      $PLUGINSDIR/StdUtils.dll

    • Size

      100KB

    • MD5

      c6a6e03f77c313b267498515488c5740

    • SHA1

      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

    • SHA256

      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

    • SHA512

      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

    • SSDEEP

      3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v

    Score
    3/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      0d7ad4f45dc6f5aa87f606d0331c6901

    • SHA1

      48df0911f0484cbe2a8cdd5362140b63c41ee457

    • SHA256

      3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

    • SHA512

      c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

    • SSDEEP

      192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6

    Score
    3/10
    • Target

      $PLUGINSDIR/WinShell.dll

    • Size

      3KB

    • MD5

      1cc7c37b7e0c8cd8bf04b6cc283e1e56

    • SHA1

      0b9519763be6625bd5abce175dcc59c96d100d4c

    • SHA256

      9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

    • SHA512

      7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

    Score
    3/10
    • Target

      $PLUGINSDIR/app-64.7z

    • Size

      69.5MB

    • MD5

      cfe7e3f1765e73ad4dbdd224dcef3ff5

    • SHA1

      4ee16b2373fc88cc1dda286f0dd4fbeccf3089ca

    • SHA256

      4503105d87564d085a9065a3755acedd296f54c73fc14d878f7fe0b2bebde5e6

    • SHA512

      5179defe5c74a810b3c166d4fe10247bfdcdfc53c1a37d9c80f226094970234cb1e1b0d23e67f1ddffe8572c94500c327a3fd8a7bffa706b7bf20aaad27a2288

    • SSDEEP

      1572864:LnjRkJ7cQG4Cfwn3Hi0MoXGeLxwTR5Tlpl+YfYVD9bIHIjyshvOWUMT+Q:HRdQ133MG3STzRpQYfKD1jR2FMTF

    Score
    3/10
    • Target

      LICENSE.electron.txt

    • Size

      1KB

    • MD5

      4d42118d35941e0f664dddbd83f633c5

    • SHA1

      2b21ec5f20fe961d15f2b58efb1368e66d202e5c

    • SHA256

      5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

    • SHA512

      3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

    Score
    1/10
    • Target

      chrome_100_percent.pak

    • Size

      126KB

    • MD5

      8626e1d68e87f86c5b4dabdf66591913

    • SHA1

      4cd7b0ac0d3f72587708064a7b0a3beca3f7b81c

    • SHA256

      2caa1da9b6a6e87bdb673977fee5dd771591a1b6ed5d3c5f14b024130a5d1a59

    • SHA512

      03bcd8562482009060f249d6a0dd7382fc94d669a2094dec08e8d119be51bef2c3b7b484bb5b7f805ae98e372dab9383a2c11a63ab0f5644146556b1bb9a4c99

    • SSDEEP

      3072:AEKzwqCT4weSxQCS/qGTL2o418Gb0+VRLf0ld0GY3cQ39Vm2I:AEKzwt4hC4/rK18Gb0OV8ld0GecQ3f2

    Score
    3/10
    • Target

      chrome_200_percent.pak

    • Size

      175KB

    • MD5

      48515d600258d60019c6b9c6421f79f6

    • SHA1

      0ef0b44641d38327a360aa6954b3b6e5aab2af16

    • SHA256

      07bee34e189fe9a8789aed78ea59ad41414b6e611e7d74da62f8e6ca36af01ce

    • SHA512

      b7266bc8abc55bd389f594dac0c0641ecf07703f35d769b87e731b5fdf4353316d44f3782a4329b3f0e260dead6b114426ddb1b0fb8cd4a51e0b90635f1191d9

    • SSDEEP

      3072:rDQYaEQN6AJPrSxQCS/qGTafR54x5GMR+F44ffbdZnYw9p4AbIVGYoDd+HxNK/r4:rDQYaNN68rC4/Ygx5GMRejnbdZnVE6YR

    Score
    3/10
    • Target

      icudtl.dat

    • Size

      10.1MB

    • MD5

      adfd2a259608207f256aeadb48635645

    • SHA1

      300bb0ae3d6b6514fb144788643d260b602ac6a4

    • SHA256

      7c8c7b05d70145120b45ccb64bf75bee3c63ff213e3e64d092d500a96afb8050

    • SHA512

      8397e74c7a85b0a2987cae9f2c66ce446923aa4140686d91a1e92b701e16b73a6ce459540e718858607ecb12659bedac0aa95c2713c811a2bc2d402691ff29dc

    • SSDEEP

      98304:ffPBQYOo+ddlymff2LfPQCvliXUxiG9Ha93Whla6ZENSs285:ffPBhORjfAHliXUxiG9Ha93Whla6ZEV7

    Score
    3/10
    • Target

      locales/af.pak

    • Size

      353KB

    • MD5

      464e5eeaba5eff8bc93995ba2cb2d73f

    • SHA1

      3b216e0c5246c874ad0ad7d3e1636384dad2255d

    • SHA256

      0ad547bb1dc57907adeb02e1be3017cce78f6e60b8b39395fe0e8b62285797a1

    • SHA512

      726d6c41a9dbf1f5f2eff5b503ab68d879b088b801832c13fba7eb853302b16118cacda4748a4144af0f396074449245a42b2fe240429b1afcb7197fa0cb6d41

    • SSDEEP

      6144:j54QCpN9/WiHIR9a5D4+kQMGSB+jC6kAw1TUKKpg3b9xIsVxSt2y5qP3ux5tPwDV:F9CpN9OiHIRX+HMT+jC6kAw1TYpg3b9P

    Score
    3/10
    • Target

      locales/am.pak

    • Size

      569KB

    • MD5

      2c933f084d960f8094e24bee73fa826c

    • SHA1

      91dfddc2cff764275872149d454a8397a1a20ab1

    • SHA256

      fa1e44215bd5acc7342c431a3b1fddb6e8b6b02220b4599167f7d77a29f54450

    • SHA512

      3c9ecfb0407de2aa6585f4865ad54eeb2ec6519c9d346e2d33ed0e30be6cc3ebfed676a08637d42c2ca8fa6cfefb4091feb0c922ff71f09a2b89cdd488789774

    • SSDEEP

      12288:QqhqEuPxT8xZTtWosuF9Q5m9yAAVzfukCQox30jH8+I:Zh8T8xTWoZF9Q5m9yAAVzXCQ0

    Score
    3/10
    • Target

      locales/ar.pak

    • Size

      624KB

    • MD5

      fdbad4c84ac66ee78a5c8dd16d259c43

    • SHA1

      3ce3cd751bb947b19d004bd6916b67e8db5017ac

    • SHA256

      a62b848a002474a8ea37891e148cbaf4af09bdba7dafebdc0770c9a9651f7e3b

    • SHA512

      376519c5c2e42d21acedb1ef47184691a2f286332451d5b8d6aac45713861f07c852fb93bd9470ff5ee017d6004aba097020580f1ba253a5295ac1851f281e13

    • SSDEEP

      12288:K+sgtqIj5/XvYUtOkQIkqBJ5SNbW+eTtvZEMgSENjM:KD4Fek75z+K

    Score
    3/10
    • Target

      locales/bg.pak

    • Size

      652KB

    • MD5

      38bcabb6a0072b3a5f8b86b693eb545d

    • SHA1

      d36c8549fe0f69d05ffdaffa427d3ddf68dd6d89

    • SHA256

      898621731ac3471a41f8b3a7bf52e7f776e8928652b37154bc7c1299f1fd92e1

    • SHA512

      002adbdc17b6013becc4909daf2febb74ce88733c78e968938b792a52c9c5a62834617f606e4cb3774ae2dad9758d2b8678d7764bb6dcfe468881f1107db13ef

    • SSDEEP

      12288:MMq8w2kMLlYrdAs1aQUx41aVVwslMLOmFOMw35uKN31tfbDMxbV2Jfu64Kjz5fS+:MMqckulYrdAs1aQUmBsmRw35uK7Jgxho

    Score
    3/10
    • Target

      locales/bn.pak

    • Size

      838KB

    • MD5

      9340520696e7cb3c2495a78893e50add

    • SHA1

      eed5aeef46131e4c70cd578177c527b656d08586

    • SHA256

      1ea245646a4b4386606f03c8a3916a3607e2adbbc88f000976be36db410a1e39

    • SHA512

      62507685d5542cfcd394080917b3a92ca197112feea9c2ddc1dfc77382a174c7ddf758d85af66cd322692215cb0402865b2a2b212694a36da6b592028caafcdf

    • SSDEEP

      3072:6gGTLRFbMdhBVHvr5eSnC6PRWhk7Bbd8+D95H0XluZ:YWBlvr5FCYRWuBbdB5wl2

    Score
    3/10
    • Target

      locales/ca.pak

    • Size

      400KB

    • MD5

      4cd6b3a91669ddcfcc9eef9b679ab65c

    • SHA1

      43c41cb00067de68d24f72e0f5c77d3b50b71f83

    • SHA256

      56efff228ee3e112357d6121b2256a2c3acd718769c89413de82c9d4305459c6

    • SHA512

      699be9962d8aae241abd1d1f35cd8468ffbd6157bcd6bdf2c599d902768351b247baad6145b9826d87271fd4a19744eb11bf7065db7fefb01d66d2f1f39015a9

    • SSDEEP

      12288:bgoRVrijIs3cejEYBCqS4o3nbhjJSwHQliEwfwVEMXdLbpuQ16BtryBiGIle3nei:b3GQUwJAMNTCypxB5WMml

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks