Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3vapev4[1].exe
windows11-21h2-x64
7$PLUGINSDI...ls.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3LICENSES.c...m.html
windows11-21h2-x64
1d3dcompiler_47.dll
windows11-21h2-x64
1ffmpeg.dll
windows11-21h2-x64
1libEGL.dll
windows11-21h2-x64
1libGLESv2.dll
windows11-21h2-x64
1resources/elevate.exe
windows11-21h2-x64
1sigortacixd.exe
windows11-21h2-x64
7vk_swiftshader.dll
windows11-21h2-x64
1vulkan-1.dll
windows11-21h2-x64
1$PLUGINSDI...7z.dll
windows11-21h2-x64
3General
-
Target
vapev4[1].exe
-
Size
65.1MB
-
Sample
240613-pfmj5ayarb
-
MD5
14a17a206f1f16875c53812063ae284b
-
SHA1
68c716c1987dfc70cee294f834947e888f446aa4
-
SHA256
90fd17cf8603ce14ef8e537d020bbe360bd1f856028da7cff94abbc76203a7ff
-
SHA512
49fe838726d9f89ebb639c4d30716830c821fc3bdf949b1c31ed93c59bffb853e898c9ff1b71af43cddf1bab6e796332f5bbf227a5f89a9edcb061319e01ff9a
-
SSDEEP
1572864:6jFjCk2N6QVPTslW7Na6QM9Rhiaq0U65MyNQhLqum+op16Ir7:yjz2bVPgKaSREaq0U65JA1orV7
Static task
static1
Behavioral task
behavioral1
Sample
vapev4[1].exe
Resource
win11-20240611-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win11-20240419-en
Behavioral task
behavioral4
Sample
LICENSES.chromium.html
Resource
win11-20240611-en
Behavioral task
behavioral5
Sample
d3dcompiler_47.dll
Resource
win11-20240611-en
Behavioral task
behavioral6
Sample
ffmpeg.dll
Resource
win11-20240508-en
Behavioral task
behavioral7
Sample
libEGL.dll
Resource
win11-20240508-en
Behavioral task
behavioral8
Sample
libGLESv2.dll
Resource
win11-20240508-en
Behavioral task
behavioral9
Sample
resources/elevate.exe
Resource
win11-20240611-en
Behavioral task
behavioral10
Sample
sigortacixd.exe
Resource
win11-20240508-en
Behavioral task
behavioral11
Sample
vk_swiftshader.dll
Resource
win11-20240611-en
Behavioral task
behavioral12
Sample
vulkan-1.dll
Resource
win11-20240611-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win11-20240508-en
Malware Config
Targets
-
-
Target
vapev4[1].exe
-
Size
65.1MB
-
MD5
14a17a206f1f16875c53812063ae284b
-
SHA1
68c716c1987dfc70cee294f834947e888f446aa4
-
SHA256
90fd17cf8603ce14ef8e537d020bbe360bd1f856028da7cff94abbc76203a7ff
-
SHA512
49fe838726d9f89ebb639c4d30716830c821fc3bdf949b1c31ed93c59bffb853e898c9ff1b71af43cddf1bab6e796332f5bbf227a5f89a9edcb061319e01ff9a
-
SSDEEP
1572864:6jFjCk2N6QVPTslW7Na6QM9Rhiaq0U65MyNQhLqum+op16Ir7:yjz2bVPgKaSREaq0U65JA1orV7
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/StdUtils.dll
-
Size
100KB
-
MD5
c6a6e03f77c313b267498515488c5740
-
SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15
-
SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
-
SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
-
SSDEEP
3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
12KB
-
MD5
0d7ad4f45dc6f5aa87f606d0331c6901
-
SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457
-
SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
-
SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
-
SSDEEP
192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
Score3/10 -
-
-
Target
LICENSES.chromium.html
-
Size
6.4MB
-
MD5
c3528648bedbde1223a2faab1a3f9af3
-
SHA1
934d3c8f184258338ff380964ed89053ce69ac5b
-
SHA256
57b8e5a3f2cd62805001aefca035c7348b4d1abac157e6df3d798bb31f2ec3d2
-
SHA512
3e3cc0fd7a55f67ee0afff9696beef33bdc9524375bbe9d8e8f7660fd408c756c1156ca0b02ecccdc22799c7b8e74dbde012732ad6b3ebe0a3cfc54ff5132b35
-
SSDEEP
24576:d7t05kvWS99LVoFIUmf2p6y6E6c666r8HHdE/pG6:RI8j
Score1/10 -
-
-
Target
d3dcompiler_47.dll
-
Size
4.7MB
-
MD5
cb9807f6cf55ad799e920b7e0f97df99
-
SHA1
bb76012ded5acd103adad49436612d073d159b29
-
SHA256
5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a
-
SHA512
f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62
-
SSDEEP
49152:IuhjwXkKcimPVqB4faGCMhGNYYpQVTxx6k/ftO4w6FXKpOD21pLeXvZCoFwI8cc:oy904wYbZCoOI85oyI
Score1/10 -
-
-
Target
ffmpeg.dll
-
Size
2.7MB
-
MD5
bbac506408816b8b147b6f030e5ac80d
-
SHA1
68784c6ddde69572b9eec307c088655d023b8727
-
SHA256
ec08afbe0dec6bc62a280eb45090f23b1db2ddcaf883970a28b4492b3ec732f1
-
SHA512
ee6f5f418b4693c0e9a56d56c0cf83f3403924e71d73649bc46cfb96437792f5ad790dda6b78fd19d54d8a3d7384aa91edf60c51eb231df4d277ee480a3e6740
-
SSDEEP
49152:jMoI7Qj3trgDtcfkW76fSL5Yqq6uthy4Y6NO8PyJegPTagrcjdiCOi2iNN3lzl3l:L3Kk76fUq/4TagreBOirnW
Score1/10 -
-
-
Target
libEGL.dll
-
Size
468KB
-
MD5
a7e959ff2d815577a4107348dced1d55
-
SHA1
773d2a83e38ca7b4f1f71b4b9cfa2b42f623285f
-
SHA256
88a72590d32650c6112a9ee8974419dc1db48f4085af5bd998e7eaab78b0cd6d
-
SHA512
616afa5cc72c6c592b57f4f532ee0df56a19b053bd049a1651e6a0b8599bbcb7fbb3795acfdd9901c60e2bcc05616e649fb94dae45ae35051cd3eaa1457fcbdd
-
SSDEEP
12288:Qu0LAjbIkyVVR8O9v/6TiT5eU3axzvOwo:Qub49/6TiQzvOX
Score1/10 -
-
-
Target
libGLESv2.dll
-
Size
7.2MB
-
MD5
8a4e0c0101767abcc4cf9283589789ea
-
SHA1
8b7f107c0494460f19cc7546089c3d91865bb8d0
-
SHA256
6190498b331769f86428a828c95a2bbf7cd9424825114293725adaa1e761f864
-
SHA512
191e1e49ed39a15a84945094e23f1b142f349d2c9fd00fb40299437be3a080686ce4da1af0ad270b37c56901cb2d0ecc842df25d1e2fbb3a0d36b785350b1838
-
SSDEEP
98304:MpHkfpqDftdyDs21Oyv8VrbXIffVkoXSmkgsOMid:MlkmTyDSVPYffcKsId
Score1/10 -
-
-
Target
resources/elevate.exe
-
Size
105KB
-
MD5
792b92c8ad13c46f27c7ced0810694df
-
SHA1
d8d449b92de20a57df722df46435ba4553ecc802
-
SHA256
9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
-
SHA512
6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
-
SSDEEP
3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
Score1/10 -
-
-
Target
sigortacixd.exe
-
Size
154.8MB
-
MD5
46253ba66e62c99f2b4f56ad079f4a15
-
SHA1
15b5b512fea69bc6082265b574b5548d4169e712
-
SHA256
70f82bf21f88abd131fe52fc21b85c2778715af3d28d8c8bec8729389013d59d
-
SHA512
9e5e2eba88287ea8220487a7afa8aaccf970c530988ca8c407aa17a9db38d1c2bfffe3f2420722e05b9c7826054dd1577abe71abfc4909d822ed3a128adcd93b
-
SSDEEP
1572864:1UNrUK1epsL/7TCuLct0wGWlm0ZMy2Q5t92grqsSlHSIcelNVtC+vp5FD+gr0cAU:eegW7q48MGo
-
Drops startup file
-
Loads dropped DLL
-
-
-
Target
vk_swiftshader.dll
-
Size
5.0MB
-
MD5
41a4d1e69200554d6ec6424dc725ae76
-
SHA1
52116bbe1b6ab7c737246ce53c3b84d543e9b3d9
-
SHA256
8ed50197b86ffcb2b9dbd744f168e862c239357900a75281376ceb6ad0283a38
-
SHA512
5367764fe3927454b283799e82a12a73b0f0b957021857485a5e2fd3e99a56ac6b520253d3ca28c778a015c6e4dd867037f062fb72f865bfe234830804130ce8
-
SSDEEP
49152:5G7ixZvPbWjIXTFy1RYQZHJvuZBiDTwgvsrt5/PXd0kpmaN+WUf4CvB25zT7RCA/:w7iDPqjvzO1Lhgf49zT7grg4
Score1/10 -
-
-
Target
vulkan-1.dll
-
Size
899KB
-
MD5
e1b68a105072fc5aa7e06c73b5a310f4
-
SHA1
466674e56c09aefbba20d6c4c93b4e2a6a40a79f
-
SHA256
4ee4532ec52c5fec359c36d7e2576cc13060e2499659aedddf26f9f45c2ebc7f
-
SHA512
8b4e8f4ac7f5d84c0427c8c01e679f93de197ad0ff5868e8a9d35566feaa6e23c8524d380f659358de843f49e22036250de6581d27870fa9ad519d8d97ff5d6e
-
SSDEEP
24576:bR9nl1crwjLAQw6Z5WUDYsH56g3P0zAk7:bR1l1culw6Z5WUDYsH56g3P0zAk7
Score1/10 -
-
-
Target
$PLUGINSDIR/nsis7z.dll
-
Size
424KB
-
MD5
80e44ce4895304c6a3a831310fbf8cd0
-
SHA1
36bd49ae21c460be5753a904b4501f1abca53508
-
SHA256
b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
-
SHA512
c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
-
SSDEEP
6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
Score3/10 -