Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

vapev4[1].exe

windows11-21h2-x64

7

$PLUGINSDI...ls.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

LICENSES.c...m.html

windows11-21h2-x64

1

d3dcompiler_47.dll

windows11-21h2-x64

1

ffmpeg.dll

windows11-21h2-x64

1

libEGL.dll

windows11-21h2-x64

1

libGLESv2.dll

windows11-21h2-x64

1

resources/elevate.exe

windows11-21h2-x64

1

sigortacixd.exe

windows11-21h2-x64

7

vk_swiftshader.dll

windows11-21h2-x64

1

vulkan-1.dll

windows11-21h2-x64

1

$PLUGINSDI...7z.dll

windows11-21h2-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    vapev4[1].exe

  • Size

    65.1MB

  • Sample

    240613-pfmj5ayarb

  • MD5

    14a17a206f1f16875c53812063ae284b

  • SHA1

    68c716c1987dfc70cee294f834947e888f446aa4

  • SHA256

    90fd17cf8603ce14ef8e537d020bbe360bd1f856028da7cff94abbc76203a7ff

  • SHA512

    49fe838726d9f89ebb639c4d30716830c821fc3bdf949b1c31ed93c59bffb853e898c9ff1b71af43cddf1bab6e796332f5bbf227a5f89a9edcb061319e01ff9a

  • SSDEEP

    1572864:6jFjCk2N6QVPTslW7Na6QM9Rhiaq0U65MyNQhLqum+op16Ir7:yjz2bVPgKaSREaq0U65JA1orV7

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      vapev4[1].exe

    • Size

      65.1MB

    • MD5

      14a17a206f1f16875c53812063ae284b

    • SHA1

      68c716c1987dfc70cee294f834947e888f446aa4

    • SHA256

      90fd17cf8603ce14ef8e537d020bbe360bd1f856028da7cff94abbc76203a7ff

    • SHA512

      49fe838726d9f89ebb639c4d30716830c821fc3bdf949b1c31ed93c59bffb853e898c9ff1b71af43cddf1bab6e796332f5bbf227a5f89a9edcb061319e01ff9a

    • SSDEEP

      1572864:6jFjCk2N6QVPTslW7Na6QM9Rhiaq0U65MyNQhLqum+op16Ir7:yjz2bVPgKaSREaq0U65JA1orV7

    Score
    7/10
    spywarestealer

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1

    • Target

      $PLUGINSDIR/StdUtils.dll

    • Size

      100KB

    • MD5

      c6a6e03f77c313b267498515488c5740

    • SHA1

      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

    • SHA256

      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

    • SHA512

      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

    • SSDEEP

      3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v

    Score
    3/10
    behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      0d7ad4f45dc6f5aa87f606d0331c6901

    • SHA1

      48df0911f0484cbe2a8cdd5362140b63c41ee457

    • SHA256

      3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

    • SHA512

      c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

    • SSDEEP

      192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6

    Score
    3/10
    behavioral3

    • Target

      LICENSES.chromium.html

    • Size

      6.4MB

    • MD5

      c3528648bedbde1223a2faab1a3f9af3

    • SHA1

      934d3c8f184258338ff380964ed89053ce69ac5b

    • SHA256

      57b8e5a3f2cd62805001aefca035c7348b4d1abac157e6df3d798bb31f2ec3d2

    • SHA512

      3e3cc0fd7a55f67ee0afff9696beef33bdc9524375bbe9d8e8f7660fd408c756c1156ca0b02ecccdc22799c7b8e74dbde012732ad6b3ebe0a3cfc54ff5132b35

    • SSDEEP

      24576:d7t05kvWS99LVoFIUmf2p6y6E6c666r8HHdE/pG6:RI8j

    Score
    1/10
    behavioral4

    • Target

      d3dcompiler_47.dll

    • Size

      4.7MB

    • MD5

      cb9807f6cf55ad799e920b7e0f97df99

    • SHA1

      bb76012ded5acd103adad49436612d073d159b29

    • SHA256

      5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a

    • SHA512

      f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62

    • SSDEEP

      49152:IuhjwXkKcimPVqB4faGCMhGNYYpQVTxx6k/ftO4w6FXKpOD21pLeXvZCoFwI8cc:oy904wYbZCoOI85oyI

    Score
    1/10
    behavioral5

    • Target

      ffmpeg.dll

    • Size

      2.7MB

    • MD5

      bbac506408816b8b147b6f030e5ac80d

    • SHA1

      68784c6ddde69572b9eec307c088655d023b8727

    • SHA256

      ec08afbe0dec6bc62a280eb45090f23b1db2ddcaf883970a28b4492b3ec732f1

    • SHA512

      ee6f5f418b4693c0e9a56d56c0cf83f3403924e71d73649bc46cfb96437792f5ad790dda6b78fd19d54d8a3d7384aa91edf60c51eb231df4d277ee480a3e6740

    • SSDEEP

      49152:jMoI7Qj3trgDtcfkW76fSL5Yqq6uthy4Y6NO8PyJegPTagrcjdiCOi2iNN3lzl3l:L3Kk76fUq/4TagreBOirnW

    Score
    1/10
    behavioral6

    • Target

      libEGL.dll

    • Size

      468KB

    • MD5

      a7e959ff2d815577a4107348dced1d55

    • SHA1

      773d2a83e38ca7b4f1f71b4b9cfa2b42f623285f

    • SHA256

      88a72590d32650c6112a9ee8974419dc1db48f4085af5bd998e7eaab78b0cd6d

    • SHA512

      616afa5cc72c6c592b57f4f532ee0df56a19b053bd049a1651e6a0b8599bbcb7fbb3795acfdd9901c60e2bcc05616e649fb94dae45ae35051cd3eaa1457fcbdd

    • SSDEEP

      12288:Qu0LAjbIkyVVR8O9v/6TiT5eU3axzvOwo:Qub49/6TiQzvOX

    Score
    1/10
    behavioral7

    • Target

      libGLESv2.dll

    • Size

      7.2MB

    • MD5

      8a4e0c0101767abcc4cf9283589789ea

    • SHA1

      8b7f107c0494460f19cc7546089c3d91865bb8d0

    • SHA256

      6190498b331769f86428a828c95a2bbf7cd9424825114293725adaa1e761f864

    • SHA512

      191e1e49ed39a15a84945094e23f1b142f349d2c9fd00fb40299437be3a080686ce4da1af0ad270b37c56901cb2d0ecc842df25d1e2fbb3a0d36b785350b1838

    • SSDEEP

      98304:MpHkfpqDftdyDs21Oyv8VrbXIffVkoXSmkgsOMid:MlkmTyDSVPYffcKsId

    Score
    1/10
    behavioral8

    • Target

      resources/elevate.exe

    • Size

      105KB

    • MD5

      792b92c8ad13c46f27c7ced0810694df

    • SHA1

      d8d449b92de20a57df722df46435ba4553ecc802

    • SHA256

      9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

    • SHA512

      6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

    • SSDEEP

      3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l

    Score
    1/10
    behavioral9

    • Target

      sigortacixd.exe

    • Size

      154.8MB

    • MD5

      46253ba66e62c99f2b4f56ad079f4a15

    • SHA1

      15b5b512fea69bc6082265b574b5548d4169e712

    • SHA256

      70f82bf21f88abd131fe52fc21b85c2778715af3d28d8c8bec8729389013d59d

    • SHA512

      9e5e2eba88287ea8220487a7afa8aaccf970c530988ca8c407aa17a9db38d1c2bfffe3f2420722e05b9c7826054dd1577abe71abfc4909d822ed3a128adcd93b

    • SSDEEP

      1572864:1UNrUK1epsL/7TCuLct0wGWlm0ZMy2Q5t92grqsSlHSIcelNVtC+vp5FD+gr0cAU:eegW7q48MGo

    Score
    7/10
    spywarestealer

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral10

    • Target

      vk_swiftshader.dll

    • Size

      5.0MB

    • MD5

      41a4d1e69200554d6ec6424dc725ae76

    • SHA1

      52116bbe1b6ab7c737246ce53c3b84d543e9b3d9

    • SHA256

      8ed50197b86ffcb2b9dbd744f168e862c239357900a75281376ceb6ad0283a38

    • SHA512

      5367764fe3927454b283799e82a12a73b0f0b957021857485a5e2fd3e99a56ac6b520253d3ca28c778a015c6e4dd867037f062fb72f865bfe234830804130ce8

    • SSDEEP

      49152:5G7ixZvPbWjIXTFy1RYQZHJvuZBiDTwgvsrt5/PXd0kpmaN+WUf4CvB25zT7RCA/:w7iDPqjvzO1Lhgf49zT7grg4

    Score
    1/10
    behavioral11

    • Target

      vulkan-1.dll

    • Size

      899KB

    • MD5

      e1b68a105072fc5aa7e06c73b5a310f4

    • SHA1

      466674e56c09aefbba20d6c4c93b4e2a6a40a79f

    • SHA256

      4ee4532ec52c5fec359c36d7e2576cc13060e2499659aedddf26f9f45c2ebc7f

    • SHA512

      8b4e8f4ac7f5d84c0427c8c01e679f93de197ad0ff5868e8a9d35566feaa6e23c8524d380f659358de843f49e22036250de6581d27870fa9ad519d8d97ff5d6e

    • SSDEEP

      24576:bR9nl1crwjLAQw6Z5WUDYsH56g3P0zAk7:bR1l1culw6Z5WUDYsH56g3P0zAk7

    Score
    1/10
    behavioral12

    • Target

      $PLUGINSDIR/nsis7z.dll

    • Size

      424KB

    • MD5

      80e44ce4895304c6a3a831310fbf8cd0

    • SHA1

      36bd49ae21c460be5753a904b4501f1abca53508

    • SHA256

      b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

    • SHA512

      c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

    • SSDEEP

      6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck

    Score
    3/10
    behavioral13

MITRE ATT&CK Enterprise v15

Tasks