Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

1f160df75b...cs.exe

windows7-x64

7

1f160df75b...cs.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

BTAPI.dll

windows7-x64

1

BTAPI.dll

windows10-2004-x64

1

Epileptolo...ls.pdf

windows7-x64

1

Epileptolo...ls.pdf

windows10-2004-x64

1

Limean80/M...th.dll

windows7-x64

1

Limean80/M...th.dll

windows10-2004-x64

1

Opdyrkende...LL.dll

windows7-x64

1

Opdyrkende...LL.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1f160df75b05e29bc10e44345b4f6e80_NeikiAnalytics

  • Size

    582KB

  • Sample

    240509-3gjrhsdc31

  • MD5

    1f160df75b05e29bc10e44345b4f6e80

  • SHA1

    0370aa0ec56c13cce6ae980fbb17573e50cb11cc

  • SHA256

    8815e244503f5cdbfbfdda71a58219e0baa627c0986e3638d4aedef87170993b

  • SHA512

    5eaa5f311286bc181217cea255418afe1ec989de146b67e90d4470770c18085aa524632fee00a190db52c08131fe6419124085dbd97b545905bc98d2c0206ba8

  • SSDEEP

    6144:GtxpfgMigGBfkpJW23fSRuDztOu9YG7lGhqXPd09OH0O+hebWk:5cccvW23fSR0OSYG78i+OH0OjWk

Score
10/10
guloaderdownloaderupx

Malware Config

Targets

    • Target

      1f160df75b05e29bc10e44345b4f6e80_NeikiAnalytics

    • Size

      582KB

    • MD5

      1f160df75b05e29bc10e44345b4f6e80

    • SHA1

      0370aa0ec56c13cce6ae980fbb17573e50cb11cc

    • SHA256

      8815e244503f5cdbfbfdda71a58219e0baa627c0986e3638d4aedef87170993b

    • SHA512

      5eaa5f311286bc181217cea255418afe1ec989de146b67e90d4470770c18085aa524632fee00a190db52c08131fe6419124085dbd97b545905bc98d2c0206ba8

    • SSDEEP

      6144:GtxpfgMigGBfkpJW23fSRuDztOu9YG7lGhqXPd09OH0O+hebWk:5cccvW23fSR0OSYG78i+OH0OjWk

    Score
    10/10
    upxguloaderdownloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      8cf2ac271d7679b1d68eefc1ae0c5618

    • SHA1

      7cc1caaa747ee16dc894a600a4256f64fa65a9b8

    • SHA256

      6950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba

    • SHA512

      ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3

    • SSDEEP

      192:BenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XB9IwL:B8+Qlt70Fj/lQRY/9VjjlL

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      7KB

    • MD5

      f27689c513e7d12c7c974d5f8ef710d6

    • SHA1

      e305f2a2898d765a64c82c449dfb528665b4a892

    • SHA256

      1f18f4126124b0551f3dbcd0fec7f34026f930ca509f04435657cedc32ae8c47

    • SHA512

      734e9f3989ee47a86bee16838df7a09353c7fe085a09d77e70d281b21c5477b0b061616e72e8ac8fcb3dda1df0d5152f54dcc4c5a77f90fbf0f857557bf02fbc

    • SSDEEP

      96:JpmkmwmHDPVhklfSoRPB+YSvWvZckH69MSz00vQFHhAVvSGYuHnUNy2DCP:J+PVhYfSokvW2CsQFBAVaGdHnUNR

    Score
    3/10
    behavioral5behavioral6

    • Target

      BTAPI.dll

    • Size

      120KB

    • MD5

      2a9f5e92945474ccab19f7e523c6a403

    • SHA1

      a825be6ce762451213330c6fa1d537ff87988f36

    • SHA256

      29b9e7069fc04add56b11140a2b83191747b727f4fccb7aec7091212a6717fd1

    • SHA512

      3890abbb9f04afc95a6df202e6d868ca5016e8d6f89b9bfe68be3755613781e97d762fe55f31180bcd55807abb25829f547e47762b1902e6d6300780d2df312f

    • SSDEEP

      3072:a7PXzmBJm3FAvASl7Ae5xzg6S2tAESXBWHOqK4FllviJLJ56wREdww2qxBHW0Cvr:cG9mhx0vl5U1jH

    Score
    1/10
    behavioral7behavioral8

    • Target

      Epileptology103/Bullpout/Stillelsningsprvers125/Signatures Technical Details.pdf

    • Size

      21KB

    • MD5

      d0be41edd7564340d9aa2434269f2609

    • SHA1

      3fe9689346c71cbe9ecb6da52a51e641857613ff

    • SHA256

      37e4a7883be617ad2400e67a773ba10c9cb6545d96dd154ff33cfb84f7f6af38

    • SHA512

      3fff27c8407af09ee22d0cfa801a05cc6ac361fb7ccccb40578db89b4994529218cd1adf93bf79abf68a00a7f5792c7e720d1a1f12335c7fb135ee174fec9c8c

    • SSDEEP

      384:d1X/fQ3n90oj7Xsp986OzNautr6MHkjSIu+w0X6FgRLjYWiv8ku:dV/fQ390ojTspHOBasBkjHu+w0qiJYsf

    Score
    1/10
    behavioral10behavioral9

    • Target

      Limean80/Milieuforbrydelse/System.Xml.XPath.dll

    • Size

      15KB

    • MD5

      c6dcf83ee4ef5eafca43e0dbc67bdea0

    • SHA1

      dcc0bd07ce7c1752eb06c478474794729b008be9

    • SHA256

      a532c9cd98bec571baed3e7c027c6537524d61ed0557ca8f7bfb7f79a2589548

    • SHA512

      89263cc3a094adf172dfd74373150294d040d5c08fae0f539c66ef9fa653af2e1594b5bfb8eb293d72678ce7c2fb5ab1ba967a64c175ec366a1448b8e5071a30

    • SSDEEP

      384:5hlkiAQD2MWAvWqldz/uPHRN7rwcOWF//dJR9zt46:BiQ57ltMccOWF//dj9zn

    Score
    1/10
    behavioral11behavioral12

    • Target

      Opdyrkende/Rodge/Ationsdatoernes/Controller/LutComprDLL.dll

    • Size

      121KB

    • MD5

      bc445160886173a6bd809be240dec89c

    • SHA1

      be0c4ec02d21577ce1cb0ae6a65288ddc87d1151

    • SHA256

      613284a74b389b1792bcb31fdf9f26b5810f77f8e60ad413ad1c9b96a9f3a1b4

    • SHA512

      dfda71f2b156f6d57c6f6fa6f2b1fd70d84364846a4f67e71f8623224cb62e72674b74db03e5992286cbaeef41cc6e3cc18b0ad581b1c98b78070785f662a05d

    • SSDEEP

      3072:YylbN77/STkT7cKDsep9fpfEGKfj06SIBfsOOJlNE5X4:JbN77zT7ceZ9RfEhLD7QmX4

    Score
    1/10
    behavioral13behavioral14

MITRE ATT&CK Enterprise v15

Tasks