Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

vcxsrv-64....er.exe

windows11-21h2-x64

7

$PLUGINSDI...em.dll

windows11-21h2-x64

3

bitmaps/autogen.sh

windows11-21h2-x64

3

bitmaps/uninstall.exe

windows11-21h2-x64

7

dxtn.dll

windows11-21h2-x64

1

libX11.dll

windows11-21h2-x64

1

libXau.dll

windows11-21h2-x64

1

libXext.dll

windows11-21h2-x64

1

libXmu.dll

windows11-21h2-x64

1

libcrypto-1_1-x64.dll

windows11-21h2-x64

1

libgcc_s_sjlj-1.dll

windows11-21h2-x64

1

libiconv-2.dll

windows11-21h2-x64

1

libwinpthread-1.dll

windows11-21h2-x64

1

libxcb.dll

windows11-21h2-x64

1

libxml2-2.dll

windows11-21h2-x64

1

msvcp140.dll

windows11-21h2-x64

1

plink.exe

windows11-21h2-x64

1

swrast_dri.dll

windows11-21h2-x64

1

swrastwgl_dri.dll

windows11-21h2-x64

1

vcruntime140.dll

windows11-21h2-x64

1

vcruntime140_1.dll

windows11-21h2-x64

1

vcxsrv.exe

windows11-21h2-x64

1

xauth.exe

windows11-21h2-x64

1

xcalc.exe

windows11-21h2-x64

1

xclock.exe

windows11-21h2-x64

1

xhost.exe

windows11-21h2-x64

1

xkbcomp.exe

windows11-21h2-x64

1

xlaunch.exe

windows11-21h2-x64

1

xrdb.exe

windows11-21h2-x64

1

xwininfo.exe

windows11-21h2-x64

1

zlib1.dll

windows11-21h2-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    vcxsrv-64.1.20.14.0.installer.exe

  • Size

    40.9MB

  • Sample

    240825-m4dwsasfln

  • MD5

    897a71804f5263cde2376c518e4f7b13

  • SHA1

    3e97865b2af3d4a855ac932ecdb691d2128c936f

  • SHA256

    7a5cd7d9d0ac982f09c8a93051fc48ab072fcc4b52237d1b91494363b9dad27e

  • SHA512

    53ddac4b3bb0636fca204c57d1fcebddf857722cbf1fa761776fd15351629b1f26fbfc05b038609077f7c81bfe2ee8c44ee0b10f6a545df9214115dcec2f47bc

  • SSDEEP

    786432:IePGMqxc63IN5qQQ8Yb0mKT5t7EYW7KvCfVPtRitxbM75EnHvweLQbZ:IePGMqx5I1Q8C/KT3wR7DHOfPDYZ

Score
7/10
discovery

Malware Config

Targets

    • Target

      vcxsrv-64.1.20.14.0.installer.exe

    • Size

      40.9MB

    • MD5

      897a71804f5263cde2376c518e4f7b13

    • SHA1

      3e97865b2af3d4a855ac932ecdb691d2128c936f

    • SHA256

      7a5cd7d9d0ac982f09c8a93051fc48ab072fcc4b52237d1b91494363b9dad27e

    • SHA512

      53ddac4b3bb0636fca204c57d1fcebddf857722cbf1fa761776fd15351629b1f26fbfc05b038609077f7c81bfe2ee8c44ee0b10f6a545df9214115dcec2f47bc

    • SSDEEP

      786432:IePGMqxc63IN5qQQ8Yb0mKT5t7EYW7KvCfVPtRitxbM75EnHvweLQbZ:IePGMqx5I1Q8C/KT3wR7DHOfPDYZ

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      cff85c549d536f651d4fb8387f1976f2

    • SHA1

      d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e

    • SHA256

      8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8

    • SHA512

      531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

    • SSDEEP

      192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr

    Score
    3/10
    discovery
    behavioral2

    • Target

      bitmaps/autogen.sh

    • Size

      196B

    • MD5

      6d6e0d896f4beb9cf0d760cf4560034c

    • SHA1

      e4b5c59ee4ad8b53c94a3ab516477b64002281d2

    • SHA256

      313ebc9280397dba38acd9ce1e8b6e65a7c6cd445ec748eaa6ef89d30822eb7a

    • SHA512

      095f973a9fa21b3df39ede3d9d77a69ae6b5d890084e09b9d859177d412d5488fd3565390b204ce9681f51147c542e84a9b0ab1a71a105a601790ba4646e7690

    Score
    3/10
    behavioral3

    • Target

      bitmaps/uninstall.exe

    • Size

      40KB

    • MD5

      62dc5b132b1fc239655b0137fd46e65f

    • SHA1

      c9bc057389d6de58945fafe2328aae8932eea2f4

    • SHA256

      dfc0fd678a7b58385861164958344ba3a0645fe99e0e2d8f83f896119c64d3aa

    • SHA512

      8d72978ab5a05b098245ece4f9086ce905d78155bbd2302e9f66b9e22b42d755b49a1904642679e08e96eade2f96ad0b2eef7af363a6cb36c8b4b7150d296276

    • SSDEEP

      768:gXWsAYF0UQj0TU9a+IWNu9B1MxlthhMLWI027zpiUGtuMJRnt2sqK:gmsAYBdTU9fEAIS2PEtuU2sqK

    Score
    7/10
    discovery

    • Executes dropped EXE

    behavioral4

    • Target

      dxtn.dll

    • Size

      20KB

    • MD5

      b4d17430e8910e7d327979d6028011dc

    • SHA1

      9f1652326dfa336d125d810ff4b2177c39e29bb9

    • SHA256

      45956d2550ce603941a95081a8f6d4fd7033595f60a5709c857c81723c2ce72f

    • SHA512

      a78979f267dcba9d3756b3d1a7a44ddb7e044dea168af49fd0af159153fccac05ce48d015a38270c0f878c1e432eddcc219cf261266d142a1673b1e225d39579

    • SSDEEP

      384:ezKYcKCtvYiBzmwzks20GWNQfEK878SyGV8ZKlB:GSKyv/Bzmw/20ea3KZS

    Score
    1/10
    behavioral5

    • Target

      libX11.dll

    • Size

      978KB

    • MD5

      6a2b96dd01a07dcfc5698118cd4383fd

    • SHA1

      4a7e54cbe9668b33320c37db6a188183306553c8

    • SHA256

      e873557ffd83a1ffddb79021db5ef5fb4f1ab2ca4d8884d9b4666fa025ac5225

    • SHA512

      454ea9db149bbf3064514d040240c0b131fc88a16a2586aa00f29e670c8ce2123d68fcdf373540a38698ef103efb6aa2ca0bb9ba8a098280ddf0668bafdb75bc

    • SSDEEP

      24576:DUrAXUPbLBYH51D7EG5DlhVefhZFXT1I:EAXUPbLBYH51/EG5DlhVmR

    Score
    1/10
    behavioral6

    • Target

      libXau.dll

    • Size

      14KB

    • MD5

      f1fab3713b091fb733bcc9a724690f10

    • SHA1

      aa43f500852e6030856905182b1e4a4dd1d6a50d

    • SHA256

      ca5b1d8e61ac3e3cb7df2788ca17022fba3d2887493a4d2f44fb010f27a9aded

    • SHA512

      fdb8b25c9132669c2eac38ec465df0b616f2c8c3fa3c515b8de29ba76e99885eb2f5038ca6af17bc5e60ad21604bd8db876fbf382e657a0637497b5fe6051d68

    • SSDEEP

      192:+VKon7f6gHikj6eMF3316fUHO0KMgv28EcggZAVr9O:+VK+91dMF1vHq5PmO

    Score
    1/10
    behavioral7

    • Target

      libXext.dll

    • Size

      22KB

    • MD5

      83f7ed3228e46b1987a0de0ca83b9fae

    • SHA1

      7e00fc4ae8f316ebc94ea3b291cc612bac609194

    • SHA256

      cdab4ef7fee7e9951efd663169e30d587e9cac6bbf997b0d1e83f8d920a7e527

    • SHA512

      d101bd90267412ff184c1619d370f9dd3af2a0d3f721df7ce52964ba3a43a962dc9f6fde34ef1234fa93243ecfa7dfe39e948af65b665114afa02de83bf33b14

    • SSDEEP

      384:OgGovAH56WP7wxfvk+xRzEb1MWgY9xt814cS8bpgmmxxvbYWtimdqZPq4Uk:OzhtKtF317bpgNvMWtieIB

    Score
    1/10
    behavioral8

    • Target

      libXmu.dll

    • Size

      272KB

    • MD5

      430430bd31437f0a85fcbc1ec4b684e8

    • SHA1

      e13de1b7f74a55c73d8592c695a5a7084241510a

    • SHA256

      2249bba7346b8c6ea485c4bd91f6050cf8b0a4c87bc5657502c8c8c0d0923ea4

    • SHA512

      35162d9ee1097d4a09b302a772c57cfa8656bcf9e81184ff6e90f055e28a8dbb879377c9ed84313737299d206753942919ba63cda036860a806c63646adf1faa

    • SSDEEP

      6144:1EsU1HuONzdTiXF2/OVCPQ6cpGy+RPIIyK2x+4FqH9Vfua:1Es8NRKF24yYGpz

    Score
    1/10
    behavioral9

    • Target

      libcrypto-1_1-x64.dll

    • Size

      3.3MB

    • MD5

      8d183ef76cf01e5e50476b7b2df51835

    • SHA1

      f10662b3416e97ab68f8da6cf24de314b0d510ca

    • SHA256

      7cb40b9aa8e0c45c0f0bcef036b423eb93e6a546b1db7e3843c1c5ba5137f963

    • SHA512

      95163b34c66d9250d049e9763fb6c11ae94e0800437f7875986c5880438334d0139afbf029d3101d86ca53bc299ec9a0b08af17183e0f046872e49d484786ba9

    • SSDEEP

      98304:in+/Gn3HmJ0A4A6LkShrysl1CPwDv3uFfJ:EsGn3HmJ0AULkShfl1CPwDv3uFfJ

    Score
    1/10
    behavioral10

    • Target

      libgcc_s_sjlj-1.dll

    • Size

      103KB

    • MD5

      f08e203a149dc49979501c939ee90e85

    • SHA1

      8e2f5c8b8f0127b4c66ac87f08de6c70d2f912e9

    • SHA256

      0fcec12a2d819b6da2f34e3f4d01cbbad2c068e47008a0e944f7d6c1941b22a8

    • SHA512

      cbe7b3a7690999f45f9bd4d2016bd54656214afb42cfaa35e41541460c046946c4848ae5650d1e4406ef08dee58961de6e0ea719cc77914e390c7499f843a9ae

    • SSDEEP

      1536:0ibKdw9nEZMR/cEN8cPtEFXulesqbDPvHjVvzLRj6AeJtv81WiodOWu/m1ECexV9:GwxycyFXpHD5tjJpw5dOWu/maCKV6

    Score
    1/10
    behavioral11

    • Target

      libiconv-2.dll

    • Size

      1.4MB

    • MD5

      09a88768935dc6aa4a05fa03e986f7f3

    • SHA1

      b16f89cd3eb2c305695887102406846371e4e2cb

    • SHA256

      39d99d6d077544403ab9a4eadfc01e4df1196868b053f1bedadf9b288e6f9287

    • SHA512

      087b3b32cba4c2a387e902efa257df619183b2be0c1f9fb93579f4ae855c3604bbdbaddbc0fdcc1548cb5830396bdad855e4a7de3ce5f9191c86beec284149fa

    • SSDEEP

      24576:J9fBAUZLY7B1bbTEpGavkg3NyeuQ6l9fHOf3086+q72lW:J9BAUZLY7BypGaXBuQQ9uD652lW

    Score
    1/10
    behavioral12

    • Target

      libwinpthread-1.dll

    • Size

      71KB

    • MD5

      191d63b6cfa2a7be62806b0e834911f5

    • SHA1

      a6cf014e9be50fc22e4e35a993b5525824d28c2d

    • SHA256

      545e9040a2637c6cb3775ee40599ad2266355c679aa8f06bb036e16edb0ce0d7

    • SHA512

      9950f95f14f5b301b6475f5b09a34c329648b3fa38823b75f4f1e843df4133d1c95782d2abb7195a56ac393380b4d1a9fd160cf0c30c97c3ab9b0eded1183694

    • SSDEEP

      1536:yczm9t98AHJ+rw5IwjiCIN1CYdLwwKwO+1g1E4cYV:yZj5H95fG8Ydc+QE4cYV

    Score
    1/10
    behavioral13

    • Target

      libxcb.dll

    • Size

      130KB

    • MD5

      c83099de1ab4ad88586bccf6c499f793

    • SHA1

      f8c9750deed32c3614cc7674a89619dbba2196cb

    • SHA256

      225c87f90ebd05924abdb27a89658eaccc9933c29234f1ad4df57f32e5045d9d

    • SHA512

      52539ec52ea88d33ff69472729377ca889f40250f2a4d4218b2ea43298292a44ad57ff353513e7b523ccf78f0af801fe342b0010f7178410d65da755d046f9f4

    • SSDEEP

      3072:QP/wO43KQGEecJWR+emh4tBEJthxVEiId98ZQfS4jnFa:NK41ciIuQL

    Score
    1/10
    behavioral14

    • Target

      libxml2-2.dll

    • Size

      5.4MB

    • MD5

      5614170928db34e486644ef6ca7d2992

    • SHA1

      3fccdad422034ab623b92df661e8af1638962536

    • SHA256

      3c68a190dc6d550334ff9d0a506e9526105b008364dad0915562413ceec092cb

    • SHA512

      306fecb2e656c1bb10334be1f4a31b0ce10df0c41f0a5a03063e22c71d21323a88df8d914221ee70f177d011efdab5baa7c547bb31f2ec9fe274854fa67d1a8e

    • SSDEEP

      49152:ZWlUZWkkHK1Vjj9xztNuyHO6+a0SIPu8Z9Hudpi+bwxAfjniXdWM:3NkwBRH0SIPu8XHvxAfjiXdWM

    Score
    1/10
    behavioral15

    • Target

      msvcp140.dll

    • Size

      552KB

    • MD5

      cb75d6437418afe1a7b52acf75730ff1

    • SHA1

      54c2da9552671b161cc87eb50fbdb86319b00f56

    • SHA256

      7c4ce9d6bfcd6d9db4eef4e75ecdcf5a8e5320106e80f1eca617439fa43f33e8

    • SHA512

      f58abb740a30467e2d8aedd7eed357da020fdc7d966e245890d102a52e96fea296e122c1d2bc112423fc64b6f5e70b7df3f3eb7de1bf5c2f5f0eb3644f1e06d6

    • SSDEEP

      12288:P/Wn7JnU0QUgqtLe1fqSKnqEXG6IOaaal7wC/QaDWxncycIW6z9y5QEKZm+jWody:XN59IW6z9OQEKZm+jWodEEYZ

    Score
    1/10
    behavioral16

    • Target

      plink.exe

    • Size

      306KB

    • MD5

      30db8076805616406677a2746cd9ad72

    • SHA1

      11206f5b100313dce607b741dd9cbb0ce3afa866

    • SHA256

      621b610f01f0b76db7e6952d642e3f4a1e27af6c13dd42340d6c5446fce2360f

    • SHA512

      24af474ee47e0b010be43d48789632b3d6ff6ec31d394d7596aeb4a12315fb3861c47d4cef66155ff7a8f7420e94e482503415a36db298a44db74f43bf2dc244

    • SSDEEP

      6144:/LgLKXmiuCPR4WsDlrbAxzBAuwRu0aRdClHixZCyagqikb:/MbDlrbAzAuwRuLdClH0Zg/

    Score
    1/10
    behavioral17

    • Target

      swrast_dri.dll

    • Size

      10.2MB

    • MD5

      ea9de82f09a71014a79e188b8933ffb9

    • SHA1

      db26b22c92b3c0aebf49b3a8701f08357eb9ea6c

    • SHA256

      660deb86818ac53e8002999e41fc0324f368621aa31dbed7a899ecd935d433df

    • SHA512

      7d2b76a572c58d9de622132072f8a52c2c3cb690c9f4379a40d41ea21f246f4d5ee0e34f0324a8b0307ba260945a3c1b037e35363ef384380ab25e138666ebf1

    • SSDEEP

      196608:Y1l1HgbXDKg+fO6kR4FfBaiCD3/wzULHI9QBTjfwJLIPnrwVxv7CIWkWp87DZ:Y1l1HgbXDKg+fO6kR4GHD3YzULHI9QBC

    Score
    1/10
    behavioral18

    • Target

      swrastwgl_dri.dll

    • Size

      360KB

    • MD5

      a52b217fbcf626709d9093760c42e8b7

    • SHA1

      cb96de4df7c223707a7e3cbac94d3534db3b2059

    • SHA256

      7abf2334819fd7e849d2a12112609dac2821055d77a8791fcefa8af980358df9

    • SHA512

      63552f897f84422abfe318491b730add60e96d9763ffd232faedec58f11639828c39f75aef9fadf72a17c702ad87ff40d6b8674bb34391938eb66aa79a0b5447

    • SSDEEP

      6144:ULbic4kSWM3QfudQYdUB8buVYSMwWXjZ7i:U6c4zZ5Ugd7

    Score
    1/10
    behavioral19

    • Target

      vcruntime140.dll

    • Size

      94KB

    • MD5

      a87575e7cf8967e481241f13940ee4f7

    • SHA1

      879098b8a353a39e16c79e6479195d43ce98629e

    • SHA256

      ded5adaa94341e6c62aea03845762591666381dca30eb7c17261dd154121b83e

    • SHA512

      e112f267ae4c9a592d0dd2a19b50187eb13e25f23ded74c2e6ccde458bcdaee99f4e3e0a00baf0e3362167ae7b7fe4f96ecbcd265cc584c1c3a4d1ac316e92f0

    • SSDEEP

      1536:yKHLG4SsAzAvadZw+1Hcx8uIYNUzU6Ha4aecbK/zJZ0/b:yKrfZ+jPYNz6Ha4aecbK/FZK

    Score
    1/10
    behavioral20

    • Target

      vcruntime140_1.dll

    • Size

      36KB

    • MD5

      37c372da4b1adb96dc995ecb7e68e465

    • SHA1

      6c1b6cb92ff76c40c77f86ea9a917a5f854397e2

    • SHA256

      1554b5802968fdb2705a67cbb61585e9560b9e429d043a5aa742ef3c9bbfb6bf

    • SHA512

      926f081b1678c15dc649d7e53bfbe98e4983c9ad6ccdf11c9383ca1d85f2a7353d5c52bebf867d6e155ff897f4702fc4da36a8f4cf76b00cb842152935e319a6

    • SSDEEP

      384:5GnvMCmWEyhUcSLt5a9k6KrOE5fY/ntz5txWE6Wc+XfbRuncS74G5WreKWn14gHc:rCm5yhUcwrHY/ntTxT6ovq7nt+dN

    Score
    1/10
    behavioral21

    • Target

      vcxsrv.exe

    • Size

      3.6MB

    • MD5

      10297f84807f79024874c61c0fbdc616

    • SHA1

      61c617efd35ba10132449cc07de62c0aaedb50d3

    • SHA256

      a00a750402f9940073e1b4be8cf260f368e1a23ecf6f637de3aa4d4b4cd4e213

    • SHA512

      3cdc10538e645ae8c1f28b177ccfa4eb36506ff47984cc77a34667eebf654ecf6dc4647f0bc4925cf8d2f6da51174b3f77803f6df3922ffe34f7453dc0abe43b

    • SSDEEP

      49152:2aE8tjZQl6saqAPgkymuGXzosh2arpyiDMvEeEKPRD7aOzuLI+oX9IhHow9+uD:+w1rt0YYzak9IhHowouD

    Score
    1/10
    behavioral22

    • Target

      xauth.exe

    • Size

      45KB

    • MD5

      924e4f5d75f96fbd79c7924ab5e3e5af

    • SHA1

      941c72c6f9018ba7c984b140c70cff299802afd1

    • SHA256

      a729429ab6ba4b74bca0aea9105c1c1fc4a8c875d47b1f787a4037badc7b1ce7

    • SHA512

      4725e9603b03dddafe3209c30b1fee0634730963a027925cfcc03475b803c632621a1b082f927edc5ccb27c88a848413b286e26317759fa4ad3ce950fb2f9d05

    • SSDEEP

      768:vinDCo40eu52WqDHIQ2Bv/w/b9D17nqUYWgpqWHBrk3JBYeYfxJUgT:aDCo4S527bz2Bv4/bRl/YpqUk3JBYeYT

    Score
    1/10
    behavioral23

    • Target

      xcalc.exe

    • Size

      596KB

    • MD5

      47b12c9d4012b2ac13e5a5fba9576aea

    • SHA1

      863075423fb509455939caee82f5c581ec38f3d3

    • SHA256

      cba1fdcd7d558829c50f76bb1b6135bba55fb89d3f574d49dd522812d4672472

    • SHA512

      bc38437ede3e4f93188fc91df8d2196ae1ce42acb38180123878f4ceb148cbfb92133f26b3fcb8547a01d4f397742bd2cc4ae1c268fa4614e91bf199844a3691

    • SSDEEP

      12288:1OnIBmpSqEgi9qrFKtvuzPCIeqj6f55xQUqJyeEEXLkhu:11BwEhqrFKtvujCIeqj6x5HqkEXL

    Score
    1/10
    behavioral24

    • Target

      xclock.exe

    • Size

      1.5MB

    • MD5

      2174d902e1b6905856a16d95a25934e9

    • SHA1

      68c2364a1d0815971c2bbc4dd4fb480ad8539f52

    • SHA256

      5d8f57533b88ce3cc8a403166a1add363d89c3572e2c7e1768732092d042ba38

    • SHA512

      ec0337d3f1811a6395936fccb508b1760731290fd16a065ddd303354a161bff0251bbc2ffa1a0109a5d1366394f0ef98802fe431828f4d56df5a6e5f580f26ad

    • SSDEEP

      24576:31Uwj6HR0uWdS5ZN8jwT6UufaCy7nnRvlAFnHhREC2YXtYFdA2ElCZIQtbTrXiEw:31Uwi0uWdS5ZNqa67iC0nRvcBReYXOF

    Score
    1/10
    behavioral25

    • Target

      xhost.exe

    • Size

      17KB

    • MD5

      4cbb51fe5bc1cf1bfb5e845d5a0377f5

    • SHA1

      c929642b43a2112edebcc65493b6c2500460fc84

    • SHA256

      07ffb3052179a881d2762d358dda60a4f4bdaf9fa4a1cb56558c9eb20191befa

    • SHA512

      63eff6bd0c09f693ee8da08f675fc27020cdd2f238f27a50853f1a261d43cf646408897147cb53bb96a2290563ea4369a1ed78df2ea42513592500f047d3dd4d

    • SSDEEP

      192:IIxIBvI26vuXeX8aLrtlKbLiVQnWYvvN9ykDggw0sQ5tfcrwfv:HWgjuXA8aLraJnJLDgv0syfv

    Score
    1/10
    behavioral26

    • Target

      xkbcomp.exe

    • Size

      298KB

    • MD5

      1a934a263eb12e10945446755a74d458

    • SHA1

      856df9a51aba258ce8c054da82f81c14ebac3d90

    • SHA256

      57b87f1fccf36a449aedab2b5b57dd7bc0fb66f13a2fac900a37331ffeb64567

    • SHA512

      66f803e30aa0be420b10915729dd8edd46cb36dd96d805776d4888c1d0b7c5e75d815c79dd17f79a740f697e861a6283144b9bd87269d707e226ecf9b3ddb2dc

    • SSDEEP

      6144:+DEVPA/2d9VjXjVd4uAz4NVTTIZkv+Px:+DEPAat8uhqx

    Score
    1/10
    behavioral27

    • Target

      xlaunch.exe

    • Size

      175KB

    • MD5

      53059ef5f499271d688e1d4a2b848c9e

    • SHA1

      3138cf4c87fa176f1c0bec178f5abc2e418719a8

    • SHA256

      51d27308290326a2f1a95a6fe67013cf36b1490bc1dd5f462ce1308aa67ce0a6

    • SHA512

      ee03a2c26c15089635e883d682673430db6ccc1520f2788038817e4f140eaeb3f15a8a62fe7e9507c45c8fc1bb2b22faa07037ff55ad6ab0b495bdee757a012f

    • SSDEEP

      3072:xcgKUsFGpvUYnyDpQV4jbm+asnxrwFaZ:xc+sovUYnKbtxnxrwc

    Score
    1/10
    behavioral28

    • Target

      xrdb.exe

    • Size

      31KB

    • MD5

      9933b446adab3f85c806130e081a2bae

    • SHA1

      49b5806b541470739c8cb12bdf6efb53915f916f

    • SHA256

      962d67112db3d326450ebb6d8115e00ff1ca6487d73687b6301734df6e6a6748

    • SHA512

      3e8e72309409c2f1b9d2c88d081ecb94ebbd66f2d227dcbf739962f2b32ce645bcaa94ce8037a6dc253fc8da904c2aad1618b31a1ff189a6357519a765d251b4

    • SSDEEP

      768:cd7RPmWH3Nd5qOFJZ++mkBSQ5NI7O/k+Enksc:cd7RPmWH9d5q5RQ5ABJc

    Score
    1/10
    behavioral29

    • Target

      xwininfo.exe

    • Size

      43KB

    • MD5

      27855c88c740c32c842119b17d06f44b

    • SHA1

      9fba6fbf51d103c029e6cf6f086187e6a81fd369

    • SHA256

      8fb4008edd147316d5fa1158b51856235ae9ed7dd5ba11958df48e6cac83f6cd

    • SHA512

      819955f5ac72972b814dbed16a6522d78497e021578d636271a917975eed87aa216ecc475931db886129a7ad082030b9ffc78a1d33642c53ee49a3d410cdd4ba

    • SSDEEP

      768:Oz/Q8XhEJzvJtcLlA4YGdNNVXjYEmc9f1saHSN:O7Q8XAvJtYrYEmc9

    Score
    1/10
    behavioral30

    • Target

      zlib1.dll

    • Size

      87KB

    • MD5

      c1d1cda6f531f2f6f5d92b7bbdf1441b

    • SHA1

      2fd23f064e7273fc764d060f8239106fb2e3ee0a

    • SHA256

      f3013a30ada809f362ea8a5d6ea5d73ac4c8ee37a63cf7aa1306395f2e6a73a7

    • SHA512

      7e43d662e5dc9775a91017863f135279f06d3ecc5fa34919dbe75884c5e33e70dc33db4127615931a5c9171cacfb4a25e4b2a272ed7a266d94320c570dc29b8f

    • SSDEEP

      1536:+WmSRqbL9OpR0J7d+sebc3KpklTqMszHHVCnToIf0yIOFIO8xrpfhf:xmSRLGJY3o6pk9azHHVOTBf0QPWrpN

    Score
    1/10
    behavioral31

MITRE ATT&CK Enterprise v15

Tasks