Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

808fd28dfd...0N.exe

windows7-x64

3

808fd28dfd...0N.exe

windows10-2004-x64

3

$INSTDIR_upd/$R1.exe

windows7-x64

7

$INSTDIR_upd/$R1.exe

windows10-2004-x64

7

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$INSTDIR_u...ch.exe

windows7-x64

3

$INSTDIR_u...ch.exe

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

load.pyc

windows7-x64

3

load.pyc

windows10-2004-x64

3

uninstall.exe

windows7-x64

7

uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$INSTDIR_u...io.dll

windows7-x64

3

$INSTDIR_u...io.dll

windows10-2004-x64

3

$INSTDIR_u...z2.dll

windows7-x64

3

$INSTDIR_u...z2.dll

windows10-2004-x64

3

$INSTDIR_u...rs.dll

windows7-x64

3

$INSTDIR_u...rs.dll

windows10-2004-x64

3

$INSTDIR_u...es.dll

windows7-x64

3

$INSTDIR_u...es.dll

windows10-2004-x64

3

$INSTDIR_u...al.dll

windows7-x64

3

$INSTDIR_u...al.dll

windows10-2004-x64

3

$INSTDIR_u...vs.dll

windows7-x64

3

$INSTDIR_u...vs.dll

windows10-2004-x64

3

$INSTDIR_u...ee.dll

windows7-x64

3

$INSTDIR_u...ee.dll

windows10-2004-x64

3

$INSTDIR_u...ib.dll

windows7-x64

3

$INSTDIR_u...ib.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    808fd28dfd92512974409a3a5e094d50N

  • Size

    9.0MB

  • Sample

    240911-egzwqs1elr

  • MD5

    808fd28dfd92512974409a3a5e094d50

  • SHA1

    9c51b9a1f703545b8cb2d5faa312c2c29fa664a1

  • SHA256

    276c774164e58f2a9a22e776524ac519be85cee091c7459480b7cf89206f506d

  • SHA512

    bf7edf1e656de17fc2421c39b153087e7619f595bbaf267fc807982a6d21ef2b9d6807529e94c6d951db9be1b0f26e145aa69b55dba2b86f113bdf3afe664d26

  • SSDEEP

    196608:o+Ap6xjY5x/4PouN050h5SgWKgT53PZ0xBHKWlqbuteINO3k95BK4a:VKEM5p4guuWrSgDwPZ8qsmk9G

Score
7/10
discovery

Malware Config

Targets

    • Target

      808fd28dfd92512974409a3a5e094d50N

    • Size

      9.0MB

    • MD5

      808fd28dfd92512974409a3a5e094d50

    • SHA1

      9c51b9a1f703545b8cb2d5faa312c2c29fa664a1

    • SHA256

      276c774164e58f2a9a22e776524ac519be85cee091c7459480b7cf89206f506d

    • SHA512

      bf7edf1e656de17fc2421c39b153087e7619f595bbaf267fc807982a6d21ef2b9d6807529e94c6d951db9be1b0f26e145aa69b55dba2b86f113bdf3afe664d26

    • SSDEEP

      196608:o+Ap6xjY5x/4PouN050h5SgWKgT53PZ0xBHKWlqbuteINO3k95BK4a:VKEM5p4guuWrSgDwPZ8qsmk9G

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      $INSTDIR_upd/$R1

    • Size

      53KB

    • MD5

      081ecb6bdb20c9cf8d0b69ff06b6cb19

    • SHA1

      c002b6b587b600a6382b770569ff48d89318c2e3

    • SHA256

      2bcb472477736e7822154963fd24b55a08b1c84958ca04a5d5824af3d3d5057d

    • SHA512

      1beaabe5655fc5f83bc472007013354108b4dd7dc963e27cc46f9c62b38d8b7d4520a4c338b1d88edf65f3242a09502d5822d49c400a02dce41aab61d807625e

    • SSDEEP

      1536:RgVCwGmMmybCk4baqIJOaMizu/gdLeAyNx5zu:Rgsmet6LIYizu/ceAQS

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      b55f7f1b17c39018910c23108f929082

    • SHA1

      1601f1cc0d0d6bcf35799b7cd15550cd01556172

    • SHA256

      c4c6fe032f3cd8b31528d7b99661f85ee22cb78746aee98ec568431d4f5043f7

    • SHA512

      d652f2b09396ef7b9181996c4700b25840ceaa6c1c10080a55ce3db4c25d8d85f00a21e747f9d14a3374be4cdd4ea829a18d7de9b27b13b5e304447f3e9268fa

    • SSDEEP

      96:L7fhfKaGgchPzxK6bq+pKX6D8ZLidGgmkN538:RbGgGPzxeX6D8ZyGgmkN

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $INSTDIR_upd/MagicSearch.exe

    • Size

      839KB

    • MD5

      f20d95647da55890af19af763e80926f

    • SHA1

      c1fd3d2f1b3f837b3215f38aabc74d3021fa8cbc

    • SHA256

      63d2a3922459a78408a8202b443ae71c9fb6c5a9d3ca9619bef637e02a2cc4bc

    • SHA512

      72e149a88d48eb833ebd8c20a2b35f1fcfbef5d906a6aec547012ea8c8503d63167ac8be8a91a8b413746d23f470fb9317b519c1a28c4af5255e94fe63effa81

    • SSDEEP

      24576:KT+7bom7dYEukUWI0XkGY9e5/j/gK/QIhLANM4:KTdmpJ0WI0Gg5zjQIhmM4

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      7KB

    • MD5

      4c77a65bb121bb7f2910c1fa3cb38337

    • SHA1

      94531e3c6255125c1a85653174737d275bc35838

    • SHA256

      5e66489393f159aa0fd30b630bb345d03418e9324e7d834b2e4195865a637cfe

    • SHA512

      df50eadf312469c56996c67007d31b85d00e91a4f40355e786536fc0336ac9c2fd8ad9df6e65ab390cc6f031aca28c92212ea23cc40eb600b82a63be3b5b8c04

    • SSDEEP

      96:JXmkmwmHDqaRrlfAF4IUIqhmKv6vBckXK9wSBl8gvElHturnNQaSGYuHr2DCP:JAjRrlfA6Nv6eWIElNurnNQZGdHc

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      load.pyc

    • Size

      5KB

    • MD5

      d89ce407841093b487c17c1c437e338e

    • SHA1

      66278d41326870ea7b6e9f4e43197a6a00af52c2

    • SHA256

      268bef3bca636917e9b3193ae3f45e3fe13feb8ec92eeb70bf6f6537893411c8

    • SHA512

      980e894400ca6b5cef2f545155f289e7fe6874478153569d211d89bfd9989f5286713eee441bdf451bc8620c15d2bf5b17ef5fd3e1d40fecae52de9e168bab15

    • SSDEEP

      96:gaK+SSQA4lgQRydClD6xDZAfaCyNo4XbGSjCW7oYnFN7tzR/ifPFMBIQ3LLiv:ga7nQA4kds6LiShySjCWUYFNxdiF097G

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      uninstall.exe

    • Size

      66KB

    • MD5

      a6304e29d1ee8ae4b703b7d791e46e9d

    • SHA1

      c8e18c6f576a781b03f349d2849fec105b326e11

    • SHA256

      ea0d00149fc62d52e846d3efcb35a2b28625755658e79929f2b5d86c38e5b851

    • SHA512

      78267356bc73e5a2f80542cefd440c838af8b61f78b54fec359cac1bc17f78fdfaedca3c263d6b435b1b4a7455c29e57a62ecf88e172c2190370057165693b0f

    • SSDEEP

      1536:lQNRwF/6HWFDw2ShOp0DiJkuhgdLeAyNxZ5BRrbws1K:KNRCywDw1DiJkuhceAE5Btbd1K

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral13behavioral14

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      7KB

    • MD5

      4c77a65bb121bb7f2910c1fa3cb38337

    • SHA1

      94531e3c6255125c1a85653174737d275bc35838

    • SHA256

      5e66489393f159aa0fd30b630bb345d03418e9324e7d834b2e4195865a637cfe

    • SHA512

      df50eadf312469c56996c67007d31b85d00e91a4f40355e786536fc0336ac9c2fd8ad9df6e65ab390cc6f031aca28c92212ea23cc40eb600b82a63be3b5b8c04

    • SSDEEP

      96:JXmkmwmHDqaRrlfAF4IUIqhmKv6vBckXK9wSBl8gvElHturnNQaSGYuHr2DCP:JAjRrlfA6Nv6eWIElNurnNQZGdHc

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      $INSTDIR_upd/python/_asyncio.pyd

    • Size

      53KB

    • MD5

      34ed4521b8ef602e113915cabd28f216

    • SHA1

      f5b2abe44d2081df23ccba6037dfcca2284203f9

    • SHA256

      55c4c7b50a74d83fc75f108320902c8b619080a3bb246af0bb47192d223f6e8e

    • SHA512

      322aed26b3b3f2d893019843c55fc1432bcf689727f0267188414c07d5561f72d56889b17497ee160177e51f2767485a679608c3a371f1380f090773b33e9a3b

    • SSDEEP

      768:aPg2YbusWgUn2Kn1oSJ3kaOG+6q0z2dITsn9VGmWDG4yQ:a42Y0kK+Tat3ydITsnmbyQ

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      $INSTDIR_upd/python/_bz2.pyd

    • Size

      71KB

    • MD5

      ff5ac8fb724edb1635e2ad985f98ee5b

    • SHA1

      24c4ab38a9d92c0587e540b2a45c938a244ef828

    • SHA256

      b94f64fcb49f40682ed794fa1940a1dc0c8a28f24a1768d3bfe774cf75f59b62

    • SHA512

      eac95da6496a18fcbd084b34114bcb0e9be3cfa9b55ba121fc09081ecf9e0b20dc9123f06730a687f052ecdf797716024643100bd8c1adbd046db0075ac15956

    • SSDEEP

      1536:GUrC85+U1FVoTkGBA8blhDfb9q1IT4VV+yC:RCq9dwb3Dfb9q1IT4VV4

    Score
    3/10
    discovery
    behavioral19behavioral20

    • Target

      $INSTDIR_upd/python/_contextvars.pyd

    • Size

      19KB

    • MD5

      c3aa567a4e88b8bbff326e7b4539dcf4

    • SHA1

      eb941756769de6f3799529d1d4d60b6b6dae70ae

    • SHA256

      0bc18f1a027a851e502269163764e84eabe43fc9ec72ee092e2048a8b8a277e0

    • SHA512

      2c093f783316ecfa0bd5138ec31d78d5336068c28d173b8b98f2ec581c5142135ae43eb9e91b98ae86e0119fdd47eff73ac73f881771b16329fdc60983d8df68

    • SSDEEP

      384:URc+jyq45kKGl0NIjAV6P6y6nYPLFzBX2VDFANkorae:L+jy+KnNIjA0PV6YzBGVp+ye

    Score
    3/10
    discovery
    behavioral21behavioral22

    • Target

      $INSTDIR_upd/python/_ctypes.pyd

    • Size

      105KB

    • MD5

      9db2d9962cbd754e91b40f91cbc49542

    • SHA1

      945ae09f678a4ca5f917339c304e5922e61dd588

    • SHA256

      6a6df7d77b7a5552d8443bd1b98f681ad2e6b5a8acf7ade542dd369beab7e439

    • SHA512

      a9d522f5768d265e2dca80faea239cc0ba7bec715d23058571651f8b61402650c01f3bca7f4d10e6806c8a553e79569dc852381d44169f535d63e85148d24e29

    • SSDEEP

      3072:EFvvoeWfh/jlH0GIQTL9XaT90NO/zZi+ujoBITVPaaCpT:ioHR5x1W0NO/zZ/uEpR

    Score
    3/10
    discovery
    behavioral23behavioral24

    • Target

      $INSTDIR_upd/python/_decimal.pyd

    • Size

      221KB

    • MD5

      e4292ad50769f592f34bc63f62a5e428

    • SHA1

      f7d422bba976e1a4a6b841d013da1a3149f02b67

    • SHA256

      0240f15b44e2d3e37ebefbb221d3d6017be5ef99806ec4e36c3521f284cb8043

    • SHA512

      ee51990d376f4fc5fa2b9e26f7523d70ddd3f2c1ee2a0425e2c38f83b980a4824b81fa0be38e00a4d4575f5cc43e4da9814b78cd68c691bef4ae217c10695922

    • SSDEEP

      3072:yiYU+J/u1WF8QD8mscQsjWC4nNbjdSZODFqQdeM3pJMWvug2dITsqpLHa:yrU0yLQDkUWC4bSZODFqQdF3XMWWg2GG

    Score
    3/10
    discovery
    behavioral25behavioral26

    • Target

      $INSTDIR_upd/python/_distutils_findvs.pyd

    • Size

      21KB

    • MD5

      f87cc67a246aa09a5704d6c8f209cd40

    • SHA1

      596fbb71e62c17bf71fe82e7316f8340bdb704e5

    • SHA256

      9fd534872373a8e288a7eb8dac28ae93558929034e9791058531701772f10507

    • SHA512

      da12965ea07f2de55bb5ebfe12d02ec10b34daf9959e3c40629ad305e5c64fa76715729f516083c607ff578620b3e5d408b76e1cc68cfb4b1705e5695e26f34d

    • SSDEEP

      384:UhMmXmPgMADkYO++GlfAIj7miYnYPLFzBX2VDFANkLrXo:FPgMH51kAIj71YYzBGVp+i4

    Score
    3/10
    discovery
    behavioral27behavioral28

    • Target

      $INSTDIR_upd/python/_elementtree.pyd

    • Size

      166KB

    • MD5

      d94e88ff7bcde83b29491c965cc00c69

    • SHA1

      f3445b1eb6dd0330dc3a5d1c0ab20cf850fdd2fe

    • SHA256

      68166b0554017aaddcedf6872d0623c578c5f099e1ad7f7f133259ad9863d408

    • SHA512

      ec517f93792dca7bdb19ded9baedea2be3e6be706075ae320051840a7c810b60a0edc7ebd0e8622bb9c727c9e333fa709d0783eb5c5b0c2d2b119661701402c5

    • SSDEEP

      3072:JHYn6730iW4Q9ScHYNqNRJQCMSPwoct948gCFITAfkmP:gA1cH8Mw1U8gCv

    Score
    3/10
    discovery
    behavioral29behavioral30

    • Target

      $INSTDIR_upd/python/_hashlib.pyd

    • Size

      31KB

    • MD5

      e84e1ba269371e439c2d52024aca6535

    • SHA1

      2abac4b3eb0ab5cbb86efd964089833cd3bd164f

    • SHA256

      2fcb297733e6080480ac24cf073ff5e239fb02a1ce9694313c5047f9c58d781b

    • SHA512

      22eaa0f42895eba9ab24fe1e33ef6767b2efa18529794d070858f15e116228d087fe7d3db655a564e52eb2ea01bf4a651f0f82417e0fccca8f770057b165d78c

    • SSDEEP

      768:wzONtWOKWHRsYVXwZDcejkaAGSni+L/9ZCOumdITsI0dWDG4yYb:wzObPTxZ9M4EJAHig/9ZCtmdITsI0Iyk

    Score
    3/10
    discovery
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

discovery
Score
3/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
7/10

behavioral4

discovery
Score
7/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

Score
3/10

behavioral13

discovery
Score
7/10

behavioral14

discovery
Score
7/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10