Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Ultimate Tweaks.exe

windows7-x64

7

Ultimate Tweaks.exe

windows10-2004-x64

7

$PLUGINSDI...ls.dll

windows7-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows7-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDIR/app-64.7z

windows7-x64

3

$PLUGINSDIR/app-64.7z

windows10-2004-x64

3

LICENSE.electron.txt

windows7-x64

1

LICENSE.electron.txt

windows10-2004-x64

1

chrome_100...nt.pak

windows7-x64

3

chrome_100...nt.pak

windows10-2004-x64

3

chrome_200...nt.pak

windows7-x64

3

chrome_200...nt.pak

windows10-2004-x64

3

icudtl.dat

windows7-x64

3

icudtl.dat

windows10-2004-x64

3

locales/af.pak

windows7-x64

3

locales/af.pak

windows10-2004-x64

3

locales/am.pak

windows7-x64

3

locales/am.pak

windows10-2004-x64

3

locales/ar.pak

windows7-x64

3

locales/ar.pak

windows10-2004-x64

3

locales/bg.pak

windows7-x64

3

locales/bg.pak

windows10-2004-x64

3

locales/bn.pak

windows7-x64

3

locales/bn.pak

windows10-2004-x64

3

locales/ca.pak

windows7-x64

3

locales/ca.pak

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Ultimate Tweaks.exe

  • Size

    77.0MB

  • Sample

    240825-xhs4pa1ark

  • MD5

    6e09360cae4bf1089229e4ab31e33d8a

  • SHA1

    51ee724a25a486c8a607403e2bcfb04649f762b7

  • SHA256

    30091faafd62ea7ba9868db2ee575dab98fd126a78d39590f57ea7b38b20d966

  • SHA512

    9e18d4dc6c65688a2bcba4319bac73fceeb3452ebcf507dc4fa9078ba7519fa91bcb696d7265baaa65739172ddc4970157540f379d28d805fe440c4dda1e038e

  • SSDEEP

    1572864:VOe4hJceZcymVkfWx0/sX2ZNt/Ls7fWxZaG2A/oYqJ:VOe41t+xy82LtzVxSbF

Score
10/10
zloaderdiscovery

Malware Config

Targets

    • Target

      Ultimate Tweaks.exe

    • Size

      77.0MB

    • MD5

      6e09360cae4bf1089229e4ab31e33d8a

    • SHA1

      51ee724a25a486c8a607403e2bcfb04649f762b7

    • SHA256

      30091faafd62ea7ba9868db2ee575dab98fd126a78d39590f57ea7b38b20d966

    • SHA512

      9e18d4dc6c65688a2bcba4319bac73fceeb3452ebcf507dc4fa9078ba7519fa91bcb696d7265baaa65739172ddc4970157540f379d28d805fe440c4dda1e038e

    • SSDEEP

      1572864:VOe4hJceZcymVkfWx0/sX2ZNt/Ls7fWxZaG2A/oYqJ:VOe41t+xy82LtzVxSbF

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/StdUtils.dll

    • Size

      100KB

    • MD5

      c6a6e03f77c313b267498515488c5740

    • SHA1

      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

    • SHA256

      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

    • SHA512

      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

    • SSDEEP

      3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      0d7ad4f45dc6f5aa87f606d0331c6901

    • SHA1

      48df0911f0484cbe2a8cdd5362140b63c41ee457

    • SHA256

      3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

    • SHA512

      c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

    • SSDEEP

      192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/UAC.dll

    • Size

      14KB

    • MD5

      adb29e6b186daa765dc750128649b63d

    • SHA1

      160cbdc4cb0ac2c142d361df138c537aa7e708c9

    • SHA256

      2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08

    • SHA512

      b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

    • SSDEEP

      192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/WinShell.dll

    • Size

      3KB

    • MD5

      1cc7c37b7e0c8cd8bf04b6cc283e1e56

    • SHA1

      0b9519763be6625bd5abce175dcc59c96d100d4c

    • SHA256

      9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

    • SHA512

      7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/app-64.7z

    • Size

      76.2MB

    • MD5

      8dfb6836a04b97fad58393202c9587b6

    • SHA1

      671282ad51b365930cfa4dae262b838669d29b3f

    • SHA256

      9e0751d586fdd328522ad3f84873f8be946d966af52596384af4b4c90b7a0158

    • SHA512

      103dd876fc27d2051dc6b59c364078197f52cfbba996a15b2bfbeddb511114f02a8062574e3a99018036a27ee83dea93ee1b172fa1d81a360096f98caeb7cea5

    • SSDEEP

      1572864:Ee4hJceZcymVkfWx0/sX2ZNt/Ls7fWxZaG2A/oYqb:Ee41t+xy82LtzVxSbf

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      LICENSE.electron.txt

    • Size

      1KB

    • MD5

      4d42118d35941e0f664dddbd83f633c5

    • SHA1

      2b21ec5f20fe961d15f2b58efb1368e66d202e5c

    • SHA256

      5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

    • SHA512

      3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

    Score
    1/10
    behavioral13behavioral14

    • Target

      chrome_100_percent.pak

    • Size

      150KB

    • MD5

      b1bccf31fa5710207026d373edd96161

    • SHA1

      ae7bb0c083aea838df1d78d61b54fb76c9a1182e

    • SHA256

      49aff5690cb9b0f54f831351aa0f64416ba180a0c4891a859fa7294e81e9c8e3

    • SHA512

      134a13ad86f8bd20a1d2350236269fd39c306389a600556a82025d5e0d5adaab0709d59e9b7ee96e8e2d25b6df49fefea27cdccefe5fba9687abf92a9a941d91

    • SSDEEP

      3072:AzwJCGIekwENgMBsFAXg6VKdL2o418Gb0+VRLf0ld0GY3cQ3ERVm2I:Azw1IekmMBdQXK18Gb0OV8ld0GecQ3Ey

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      chrome_200_percent.pak

    • Size

      229KB

    • MD5

      e02160c24b8077b36ff06dc05a9df057

    • SHA1

      fc722e071ce9caf52ad9a463c90fc2319aa6c790

    • SHA256

      4d5b51f720f7d3146e131c54a6f75e4e826c61b2ff15c8955f6d6dd15bedf106

    • SHA512

      1bf873b89b571974537b685cdb739f8ed148f710f6f24f0f362f8b6bb605996fcfec1501411f2cb2df374d5fdaf6e2daaada8cea68051e3c10a67030ea25929e

    • SSDEEP

      6144:gDQYaSN6svydrI8jDQUgx5GMRejnbdZnVE6YoppO4:NfSN6svydZ6edhVELoXO4

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      icudtl.dat

    • Size

      10.2MB

    • MD5

      e0f1ad85c0933ecce2e003a2c59ae726

    • SHA1

      a8539fc5a233558edfa264a34f7af6187c3f0d4f

    • SHA256

      f5170aa2b388d23bebf98784dd488a9bcb741470384a6a9a8d7a2638d768defb

    • SHA512

      714ed5ae44dfa4812081b8de42401197c235a4fa05206597f4c7b4170dd37e8360cc75d176399b735c9aec200f5b7d5c81c07b9ab58cbca8dc08861c6814fb28

    • SSDEEP

      196608:hpgPBhORiuQwCliXUxbblHa93Whli6Z86WOH:n8wkDliXUxbblHa93Whli6Z8I

    Score
    3/10
    discovery
    behavioral19behavioral20

    • Target

      locales/af.pak

    • Size

      478KB

    • MD5

      9554e414159d76754147d7e185056094

    • SHA1

      e0fb0c95cef8e8d1ebeb11a6e2ea03b9067d799e

    • SHA256

      f402c0d8494c9a2fceedcd7845ddf43b62e7d01ddb1d9c8e132efea83b724824

    • SHA512

      9e8b41f69605d7bd426243e49b0f22347b211f7d13038ee6350d86d06cc7274bb2ef1918e27548802a5437903a653d86fce85338fa97f8c9642c0e74ed59ae88

    • SSDEEP

      12288:S/n+3zo5ExirXKhaG1B2+H2JynyaI4IVzZo0vgElgA2W0PSq+2ss30fzO75g6tlX:u+3zouxkXyd1B2+H2JynyaI4IVzZo0v2

    Score
    3/10
    discovery
    behavioral21behavioral22

    • Target

      locales/am.pak

    • Size

      776KB

    • MD5

      92ffe73f193d41c5a90303955b2da67f

    • SHA1

      1d4136d8bb752da2834ebf0f4f62de56efefd78f

    • SHA256

      325dd137903fc0d9e5010a62a314d9c6984ff82afbdff2254f7c48bd03dda06a

    • SHA512

      6c4f0aac10276ab84ec4e63ec9ad0e20a1b3ce9d2368ec966cc6471600c3d28df8f9e501b4843bafa5bcf2aab57242559ba430d58853180ea653afbc8f468e67

    • SSDEEP

      24576:/Ky3ATZg8/xp1GCj+VRRz08519tcV03OzPkS:yy3J54

    Score
    3/10
    discovery
    behavioral23behavioral24

    • Target

      locales/ar.pak

    • Size

      851KB

    • MD5

      7608398c66cd0b55396f7250b3c8747c

    • SHA1

      7e8417dfc7055fb9ecbe7cfc97a8aba0bd5a0e13

    • SHA256

      3bb407fa588fb801ab241e8dda018461b54010a38648c3acc1e3550c0dfbd75a

    • SHA512

      5dd757e4f114782eab9ab8cadbfe3179ded594285b3d0f7f6fa5ca50d80d866e7c8ff6a1f44deba8bdf09c04106de635c1da22597c008023b1fdf1cc747b6f1c

    • SSDEEP

      12288:8jL0NNXRB5/G/d/RXZwR14fvPU7zUUk/K5+N0j+OzIQ4pG:8jL0LFQA75/+o

    Score
    3/10
    discovery
    behavioral25behavioral26

    • Target

      locales/bg.pak

    • Size

      885KB

    • MD5

      c80a2008d9f61c182430a728a6e059af

    • SHA1

      2f2aa33573156d9939e3fc81f8d81de4aac21e61

    • SHA256

      5947f567ce1f4ab945dc6dab1599422d412f4417b9097905150d669122e43f7d

    • SHA512

      016ce835b6bac4d5b38d72c0b3adf4d6b4e0ac04677d70c53e5938acd28b12220d2878bca7875471d008b779ea6ab4972a9875b44304e867d0bb5e4318c0edc3

    • SSDEEP

      24576:0mCDcquMMLYzzQkECPUwVbtcHp373ZA+3aAKHkVDYyKzumpod2nm5z0XuGox3QN3:JCDcquMMLYUKUwVbtcHp373Z93arkVDk

    Score
    3/10
    discovery
    behavioral27behavioral28

    • Target

      locales/bn.pak

    • Size

      1.1MB

    • MD5

      d179d38e8b9f7e60a943e2fc9f9471ad

    • SHA1

      8d109081959d194c82b89fb25a514a65233435a7

    • SHA256

      a45279ccc13390e0d93cfe1e33a7f276a5d9e97f6aefa6b6e14ecc4289703bda

    • SHA512

      fa6f3e45f40e1e48f191e4a65f5d15dabd7058af4537eea3e34998dc67dd250b00e52d1f07b10a73a67a15aada4523e50f40160d98a5f37ef4684a30ff338468

    • SSDEEP

      3072:iOXg1lMf3u3jmZLJoYPYD1uQI2HSzhb0Ylf14/QISydDbsh8VBbFKQg5sNDl2Ob:Hw3MvJZLiYQDvLxSydHsh8VBbG5Sld

    Score
    3/10
    discovery
    behavioral29behavioral30

    • Target

      locales/ca.pak

    • Size

      538KB

    • MD5

      bd846046383d64073da6eb192f5cddb1

    • SHA1

      6dd4bfb982101ecafc14eb35834caa1fe5b1e3f5

    • SHA256

      1dca9a7fcd850aecd48288999b436ff7e70cd4a96f47b40319759a800fb8eefa

    • SHA512

      521ddf6e8fb444b911212501825392562af14cfb5b31a80707fdeffb13c8afb04852b0e3f7e3363a1c3a37c5c35bb1cbe84b458e14e30b5e8d8cb00a6a349ce0

    • SSDEEP

      12288:WM49O9Y7BREeApk73K5PqF4N3Mw2juwHzejm0t3lvqbETX9/RSHhIsjcmlLEYuCy:+9aWVzaBRn1WDMN8UpOO5z/ras

    Score
    3/10
    discovery
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

zloader
Score
10/10

behavioral1

discovery
Score
7/10

behavioral2

discovery
Score
7/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

Score
3/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

discovery
Score
3/10

behavioral16

Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

Score
3/10

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.