Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3808fd28dfd...0N.exe
windows7-x64
3808fd28dfd...0N.exe
windows10-2004-x64
3$INSTDIR_upd/$R1.exe
windows7-x64
7$INSTDIR_upd/$R1.exe
windows10-2004-x64
7$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$INSTDIR_u...ch.exe
windows7-x64
3$INSTDIR_u...ch.exe
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3load.pyc
windows7-x64
3load.pyc
windows10-2004-x64
3uninstall.exe
windows7-x64
7uninstall.exe
windows10-2004-x64
7$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$INSTDIR_u...io.dll
windows7-x64
3$INSTDIR_u...io.dll
windows10-2004-x64
3$INSTDIR_u...z2.dll
windows7-x64
3$INSTDIR_u...z2.dll
windows10-2004-x64
3$INSTDIR_u...rs.dll
windows7-x64
3$INSTDIR_u...rs.dll
windows10-2004-x64
3$INSTDIR_u...es.dll
windows7-x64
3$INSTDIR_u...es.dll
windows10-2004-x64
3$INSTDIR_u...al.dll
windows7-x64
3$INSTDIR_u...al.dll
windows10-2004-x64
3$INSTDIR_u...vs.dll
windows7-x64
3$INSTDIR_u...vs.dll
windows10-2004-x64
3$INSTDIR_u...ee.dll
windows7-x64
3$INSTDIR_u...ee.dll
windows10-2004-x64
3$INSTDIR_u...ib.dll
windows7-x64
3$INSTDIR_u...ib.dll
windows10-2004-x64
3General
-
Target
808fd28dfd92512974409a3a5e094d50N
-
Size
9.0MB
-
Sample
240911-egzwqs1elr
-
MD5
808fd28dfd92512974409a3a5e094d50
-
SHA1
9c51b9a1f703545b8cb2d5faa312c2c29fa664a1
-
SHA256
276c774164e58f2a9a22e776524ac519be85cee091c7459480b7cf89206f506d
-
SHA512
bf7edf1e656de17fc2421c39b153087e7619f595bbaf267fc807982a6d21ef2b9d6807529e94c6d951db9be1b0f26e145aa69b55dba2b86f113bdf3afe664d26
-
SSDEEP
196608:o+Ap6xjY5x/4PouN050h5SgWKgT53PZ0xBHKWlqbuteINO3k95BK4a:VKEM5p4guuWrSgDwPZ8qsmk9G
Static task
static1
Behavioral task
behavioral1
Sample
808fd28dfd92512974409a3a5e094d50N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
808fd28dfd92512974409a3a5e094d50N.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$INSTDIR_upd/$R1.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
$INSTDIR_upd/$R1.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$INSTDIR_upd/MagicSearch.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$INSTDIR_upd/MagicSearch.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
load.pyc
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
load.pyc
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
uninstall.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
uninstall.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
$INSTDIR_upd/python/_asyncio.dll
Resource
win7-20240729-en
Behavioral task
behavioral18
Sample
$INSTDIR_upd/python/_asyncio.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
$INSTDIR_upd/python/_bz2.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
$INSTDIR_upd/python/_bz2.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
$INSTDIR_upd/python/_contextvars.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
$INSTDIR_upd/python/_contextvars.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
$INSTDIR_upd/python/_ctypes.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
$INSTDIR_upd/python/_ctypes.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
$INSTDIR_upd/python/_decimal.dll
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
$INSTDIR_upd/python/_decimal.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
$INSTDIR_upd/python/_distutils_findvs.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
$INSTDIR_upd/python/_distutils_findvs.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
$INSTDIR_upd/python/_elementtree.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
$INSTDIR_upd/python/_elementtree.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
$INSTDIR_upd/python/_hashlib.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
$INSTDIR_upd/python/_hashlib.dll
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
808fd28dfd92512974409a3a5e094d50N
-
Size
9.0MB
-
MD5
808fd28dfd92512974409a3a5e094d50
-
SHA1
9c51b9a1f703545b8cb2d5faa312c2c29fa664a1
-
SHA256
276c774164e58f2a9a22e776524ac519be85cee091c7459480b7cf89206f506d
-
SHA512
bf7edf1e656de17fc2421c39b153087e7619f595bbaf267fc807982a6d21ef2b9d6807529e94c6d951db9be1b0f26e145aa69b55dba2b86f113bdf3afe664d26
-
SSDEEP
196608:o+Ap6xjY5x/4PouN050h5SgWKgT53PZ0xBHKWlqbuteINO3k95BK4a:VKEM5p4guuWrSgDwPZ8qsmk9G
Score3/10 -
-
-
Target
$INSTDIR_upd/$R1
-
Size
53KB
-
MD5
081ecb6bdb20c9cf8d0b69ff06b6cb19
-
SHA1
c002b6b587b600a6382b770569ff48d89318c2e3
-
SHA256
2bcb472477736e7822154963fd24b55a08b1c84958ca04a5d5824af3d3d5057d
-
SHA512
1beaabe5655fc5f83bc472007013354108b4dd7dc963e27cc46f9c62b38d8b7d4520a4c338b1d88edf65f3242a09502d5822d49c400a02dce41aab61d807625e
-
SSDEEP
1536:RgVCwGmMmybCk4baqIJOaMizu/gdLeAyNx5zu:Rgsmet6LIYizu/ceAQS
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/nsExec.dll
-
Size
6KB
-
MD5
b55f7f1b17c39018910c23108f929082
-
SHA1
1601f1cc0d0d6bcf35799b7cd15550cd01556172
-
SHA256
c4c6fe032f3cd8b31528d7b99661f85ee22cb78746aee98ec568431d4f5043f7
-
SHA512
d652f2b09396ef7b9181996c4700b25840ceaa6c1c10080a55ce3db4c25d8d85f00a21e747f9d14a3374be4cdd4ea829a18d7de9b27b13b5e304447f3e9268fa
-
SSDEEP
96:L7fhfKaGgchPzxK6bq+pKX6D8ZLidGgmkN538:RbGgGPzxeX6D8ZyGgmkN
Score3/10 -
-
-
Target
$INSTDIR_upd/MagicSearch.exe
-
Size
839KB
-
MD5
f20d95647da55890af19af763e80926f
-
SHA1
c1fd3d2f1b3f837b3215f38aabc74d3021fa8cbc
-
SHA256
63d2a3922459a78408a8202b443ae71c9fb6c5a9d3ca9619bef637e02a2cc4bc
-
SHA512
72e149a88d48eb833ebd8c20a2b35f1fcfbef5d906a6aec547012ea8c8503d63167ac8be8a91a8b413746d23f470fb9317b519c1a28c4af5255e94fe63effa81
-
SSDEEP
24576:KT+7bom7dYEukUWI0XkGY9e5/j/gK/QIhLANM4:KTdmpJ0WI0Gg5zjQIhmM4
Score3/10 -
-
-
Target
$PLUGINSDIR/nsExec.dll
-
Size
7KB
-
MD5
4c77a65bb121bb7f2910c1fa3cb38337
-
SHA1
94531e3c6255125c1a85653174737d275bc35838
-
SHA256
5e66489393f159aa0fd30b630bb345d03418e9324e7d834b2e4195865a637cfe
-
SHA512
df50eadf312469c56996c67007d31b85d00e91a4f40355e786536fc0336ac9c2fd8ad9df6e65ab390cc6f031aca28c92212ea23cc40eb600b82a63be3b5b8c04
-
SSDEEP
96:JXmkmwmHDqaRrlfAF4IUIqhmKv6vBckXK9wSBl8gvElHturnNQaSGYuHr2DCP:JAjRrlfA6Nv6eWIElNurnNQZGdHc
Score3/10 -
-
-
Target
load.pyc
-
Size
5KB
-
MD5
d89ce407841093b487c17c1c437e338e
-
SHA1
66278d41326870ea7b6e9f4e43197a6a00af52c2
-
SHA256
268bef3bca636917e9b3193ae3f45e3fe13feb8ec92eeb70bf6f6537893411c8
-
SHA512
980e894400ca6b5cef2f545155f289e7fe6874478153569d211d89bfd9989f5286713eee441bdf451bc8620c15d2bf5b17ef5fd3e1d40fecae52de9e168bab15
-
SSDEEP
96:gaK+SSQA4lgQRydClD6xDZAfaCyNo4XbGSjCW7oYnFN7tzR/ifPFMBIQ3LLiv:ga7nQA4kds6LiShySjCWUYFNxdiF097G
Score3/10 -
-
-
Target
uninstall.exe
-
Size
66KB
-
MD5
a6304e29d1ee8ae4b703b7d791e46e9d
-
SHA1
c8e18c6f576a781b03f349d2849fec105b326e11
-
SHA256
ea0d00149fc62d52e846d3efcb35a2b28625755658e79929f2b5d86c38e5b851
-
SHA512
78267356bc73e5a2f80542cefd440c838af8b61f78b54fec359cac1bc17f78fdfaedca3c263d6b435b1b4a7455c29e57a62ecf88e172c2190370057165693b0f
-
SSDEEP
1536:lQNRwF/6HWFDw2ShOp0DiJkuhgdLeAyNxZ5BRrbws1K:KNRCywDw1DiJkuhceAE5Btbd1K
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/nsExec.dll
-
Size
7KB
-
MD5
4c77a65bb121bb7f2910c1fa3cb38337
-
SHA1
94531e3c6255125c1a85653174737d275bc35838
-
SHA256
5e66489393f159aa0fd30b630bb345d03418e9324e7d834b2e4195865a637cfe
-
SHA512
df50eadf312469c56996c67007d31b85d00e91a4f40355e786536fc0336ac9c2fd8ad9df6e65ab390cc6f031aca28c92212ea23cc40eb600b82a63be3b5b8c04
-
SSDEEP
96:JXmkmwmHDqaRrlfAF4IUIqhmKv6vBckXK9wSBl8gvElHturnNQaSGYuHr2DCP:JAjRrlfA6Nv6eWIElNurnNQZGdHc
Score3/10 -
-
-
Target
$INSTDIR_upd/python/_asyncio.pyd
-
Size
53KB
-
MD5
34ed4521b8ef602e113915cabd28f216
-
SHA1
f5b2abe44d2081df23ccba6037dfcca2284203f9
-
SHA256
55c4c7b50a74d83fc75f108320902c8b619080a3bb246af0bb47192d223f6e8e
-
SHA512
322aed26b3b3f2d893019843c55fc1432bcf689727f0267188414c07d5561f72d56889b17497ee160177e51f2767485a679608c3a371f1380f090773b33e9a3b
-
SSDEEP
768:aPg2YbusWgUn2Kn1oSJ3kaOG+6q0z2dITsn9VGmWDG4yQ:a42Y0kK+Tat3ydITsnmbyQ
Score3/10 -
-
-
Target
$INSTDIR_upd/python/_bz2.pyd
-
Size
71KB
-
MD5
ff5ac8fb724edb1635e2ad985f98ee5b
-
SHA1
24c4ab38a9d92c0587e540b2a45c938a244ef828
-
SHA256
b94f64fcb49f40682ed794fa1940a1dc0c8a28f24a1768d3bfe774cf75f59b62
-
SHA512
eac95da6496a18fcbd084b34114bcb0e9be3cfa9b55ba121fc09081ecf9e0b20dc9123f06730a687f052ecdf797716024643100bd8c1adbd046db0075ac15956
-
SSDEEP
1536:GUrC85+U1FVoTkGBA8blhDfb9q1IT4VV+yC:RCq9dwb3Dfb9q1IT4VV4
Score3/10 -
-
-
Target
$INSTDIR_upd/python/_contextvars.pyd
-
Size
19KB
-
MD5
c3aa567a4e88b8bbff326e7b4539dcf4
-
SHA1
eb941756769de6f3799529d1d4d60b6b6dae70ae
-
SHA256
0bc18f1a027a851e502269163764e84eabe43fc9ec72ee092e2048a8b8a277e0
-
SHA512
2c093f783316ecfa0bd5138ec31d78d5336068c28d173b8b98f2ec581c5142135ae43eb9e91b98ae86e0119fdd47eff73ac73f881771b16329fdc60983d8df68
-
SSDEEP
384:URc+jyq45kKGl0NIjAV6P6y6nYPLFzBX2VDFANkorae:L+jy+KnNIjA0PV6YzBGVp+ye
Score3/10 -
-
-
Target
$INSTDIR_upd/python/_ctypes.pyd
-
Size
105KB
-
MD5
9db2d9962cbd754e91b40f91cbc49542
-
SHA1
945ae09f678a4ca5f917339c304e5922e61dd588
-
SHA256
6a6df7d77b7a5552d8443bd1b98f681ad2e6b5a8acf7ade542dd369beab7e439
-
SHA512
a9d522f5768d265e2dca80faea239cc0ba7bec715d23058571651f8b61402650c01f3bca7f4d10e6806c8a553e79569dc852381d44169f535d63e85148d24e29
-
SSDEEP
3072:EFvvoeWfh/jlH0GIQTL9XaT90NO/zZi+ujoBITVPaaCpT:ioHR5x1W0NO/zZ/uEpR
Score3/10 -
-
-
Target
$INSTDIR_upd/python/_decimal.pyd
-
Size
221KB
-
MD5
e4292ad50769f592f34bc63f62a5e428
-
SHA1
f7d422bba976e1a4a6b841d013da1a3149f02b67
-
SHA256
0240f15b44e2d3e37ebefbb221d3d6017be5ef99806ec4e36c3521f284cb8043
-
SHA512
ee51990d376f4fc5fa2b9e26f7523d70ddd3f2c1ee2a0425e2c38f83b980a4824b81fa0be38e00a4d4575f5cc43e4da9814b78cd68c691bef4ae217c10695922
-
SSDEEP
3072:yiYU+J/u1WF8QD8mscQsjWC4nNbjdSZODFqQdeM3pJMWvug2dITsqpLHa:yrU0yLQDkUWC4bSZODFqQdF3XMWWg2GG
Score3/10 -
-
-
Target
$INSTDIR_upd/python/_distutils_findvs.pyd
-
Size
21KB
-
MD5
f87cc67a246aa09a5704d6c8f209cd40
-
SHA1
596fbb71e62c17bf71fe82e7316f8340bdb704e5
-
SHA256
9fd534872373a8e288a7eb8dac28ae93558929034e9791058531701772f10507
-
SHA512
da12965ea07f2de55bb5ebfe12d02ec10b34daf9959e3c40629ad305e5c64fa76715729f516083c607ff578620b3e5d408b76e1cc68cfb4b1705e5695e26f34d
-
SSDEEP
384:UhMmXmPgMADkYO++GlfAIj7miYnYPLFzBX2VDFANkLrXo:FPgMH51kAIj71YYzBGVp+i4
Score3/10 -
-
-
Target
$INSTDIR_upd/python/_elementtree.pyd
-
Size
166KB
-
MD5
d94e88ff7bcde83b29491c965cc00c69
-
SHA1
f3445b1eb6dd0330dc3a5d1c0ab20cf850fdd2fe
-
SHA256
68166b0554017aaddcedf6872d0623c578c5f099e1ad7f7f133259ad9863d408
-
SHA512
ec517f93792dca7bdb19ded9baedea2be3e6be706075ae320051840a7c810b60a0edc7ebd0e8622bb9c727c9e333fa709d0783eb5c5b0c2d2b119661701402c5
-
SSDEEP
3072:JHYn6730iW4Q9ScHYNqNRJQCMSPwoct948gCFITAfkmP:gA1cH8Mw1U8gCv
Score3/10 -
-
-
Target
$INSTDIR_upd/python/_hashlib.pyd
-
Size
31KB
-
MD5
e84e1ba269371e439c2d52024aca6535
-
SHA1
2abac4b3eb0ab5cbb86efd964089833cd3bd164f
-
SHA256
2fcb297733e6080480ac24cf073ff5e239fb02a1ce9694313c5047f9c58d781b
-
SHA512
22eaa0f42895eba9ab24fe1e33ef6767b2efa18529794d070858f15e116228d087fe7d3db655a564e52eb2ea01bf4a651f0f82417e0fccca8f770057b165d78c
-
SSDEEP
768:wzONtWOKWHRsYVXwZDcejkaAGSni+L/9ZCOumdITsI0dWDG4yYb:wzObPTxZ9M4EJAHig/9ZCtmdITsI0Iyk
Score3/10 -