Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    BorisFX Sapphire OFX.zip

  • Size

    216.2MB

  • Sample

    240723-3ptxfsyejh

  • MD5

    4742588d6a98ff10d1366189eefba0f7

  • SHA1

    118010c79d0a1eed023695ec52b3033c793e6eb4

  • SHA256

    493ab2e222425088cdb1b3622a0421ec94cfa5a0b9cf54dee76502daec4bae03

  • SHA512

    57dc30e717c5a10ce9c9605f4b13be357e3555192e5d6d02a2bd6adbd307af425745a78e7419824991fef167807cce88ac0e0e7e01d789b30e7d6ec050986ee6

  • SSDEEP

    6291456:bhRzWsenRwkLYNw2UV9iGWM9icKuhgG083xin3PDwkjThikh:bzzWjnRNYNcV9PWM8cKuhR083xin/3jl

Score
7/10

Malware Config

Targets

    • Target

      BorisFX Sapphire OFX/File/Sapphire.ofx

    • Size

      39.8MB

    • MD5

      8ea792c6eedc6df920d6b817afe0da9e

    • SHA1

      7d067158669452c1a8f124c1d937574713c885e8

    • SHA256

      6ae0b15a27661c7978566f8eafcd605c45f1380fef18a209f08d1faf943b0d3b

    • SHA512

      a9e67f099c76a13566b09c9a6862b9121ccaa86e98cebe8049543f6aa8b0c1f52319da48d392fe96daf0c3341ea48b0ca3727cd9274749b82cf835a3a5c76bc9

    • SSDEEP

      393216:cuViWPZA74ydWoIMqBs0WsQzWEfOC28l4uYiXSlgcCbeG6HfJL6:sNgMqQWs728l4uYiXSlgcCbeG6HfJL6

    Score
    1/10
    • Target

      BorisFX Sapphire OFX/Setup.exe

    • Size

      204.1MB

    • MD5

      23ad1e7cce6958035a7e0ee751505316

    • SHA1

      92891335a729a611d518378c2c0cd8abf97e740d

    • SHA256

      df7a3a158a9c10e7bf637d370ea973d81c77decbb0fc7ae430a794267b313e76

    • SHA512

      9dc76bf79aa2fd3631f9098e1c909aab72711dd6c450e2ce58167099f6592d85d16acbd66b9e956571b6550197c1fbc0554aa451aaf6ca70d4bb882c3687ec78

    • SSDEEP

      6291456:QWsenRwkLYNw2UV9iGWM9icKuhgG083xin3PDwkjThik0:QWjnRNYNcV9PWM8cKuhR083xin/3j92

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Target

      BorisFX Sapphire OFX/Win64.lnk

    • Size

      1KB

    • MD5

      34ddc4346b7a535ccd3c6c1ecb8bfa1e

    • SHA1

      d4c55048a801642197a6b21193bf2d730d1918ff

    • SHA256

      f9e7984280a67b1516d0f30de652c5efa129e9b23123bc5c529d4dfb5a106372

    • SHA512

      f90f0930a80033f65281418446badc2f5399de4cae0b4a68ee4457464440ac39cfcb91e4960fbe6b6cd44de09d8871ece351b0e5babba663be6df238617db589

    Score
    3/10
    • Target

      BorisFX Sapphire OFX/lib64.lnk

    • Size

      1KB

    • MD5

      ece77d126cc9026316e2cba71fa19389

    • SHA1

      3c99bfcb66acf5f02a7cb8da2bf3b413a5adf1e6

    • SHA256

      f8cf1265fde57643ff0d84dfba2f4cd2fadb53a65fa6e8176e41f6f4d9a32039

    • SHA512

      92a3b40a08304be74d304bc8cf21866d0c395e9e920d3d14e081fcab20749aaaf52767c584a2e87eaede56577998892509d5fca38bf1704d9654087221f2b8cc

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks