Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

5ce368d291...fN.exe

windows7-x64

7

5ce368d291...fN.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$TEMP/4204...pt.exe

windows7-x64

7

$TEMP/4204...pt.exe

windows10-2004-x64

7

$1/ALOTSettings.exe

windows7-x64

3

$1/ALOTSettings.exe

windows10-2004-x64

3

$1/alotappbar.dll

windows7-x64

3

$1/alotappbar.dll

windows10-2004-x64

3

$1/alothelper.dll

windows7-x64

3

$1/alothelper.dll

windows10-2004-x64

3

$1/alotservice.exe

windows7-x64

3

$1/alotservice.exe

windows10-2004-x64

3

$1/alotwidgets.exe

windows7-x64

3

$1/alotwidgets.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/eula.html

windows7-x64

3

$PLUGINSDIR/eula.html

windows10-2004-x64

3

$PLUGINSDI...nt.exe

windows7-x64

3

$PLUGINSDI...nt.exe

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$TEMP/4204...ff.exe

windows7-x64

3

$TEMP/4204...ff.exe

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5ce368d2918d0b47e6c655272e6ce606d45055a47af1d46fdb9eb5f34d1e0d4fN

  • Size

    1.4MB

  • Sample

    240921-b7mgjszblc

  • MD5

    e42de366e13ae419a023036d59d8d840

  • SHA1

    f0d6a98a169e48934b2057c26987729ced0027dc

  • SHA256

    5ce368d2918d0b47e6c655272e6ce606d45055a47af1d46fdb9eb5f34d1e0d4f

  • SHA512

    851465f82084f62dde57dbf404aa3003d9943c7b8b5063b04e72802b2cbe9d244c487c50105950d307999c6b93d38750c06cc95cc6c9fee4af87d97e4a43befa

  • SSDEEP

    24576:CBUTLTZsWkBChsDTesmoFbMWkzEvqdBahBHxPjX+//JNnAfZHMr2pePWkyw0vYeE:0kn3aTePod5kzEMahBRCHJNnws2Qr0wx

Score
7/10
adwarediscoverystealer

Malware Config

Targets

    • Target

      5ce368d2918d0b47e6c655272e6ce606d45055a47af1d46fdb9eb5f34d1e0d4fN

    • Size

      1.4MB

    • MD5

      e42de366e13ae419a023036d59d8d840

    • SHA1

      f0d6a98a169e48934b2057c26987729ced0027dc

    • SHA256

      5ce368d2918d0b47e6c655272e6ce606d45055a47af1d46fdb9eb5f34d1e0d4f

    • SHA512

      851465f82084f62dde57dbf404aa3003d9943c7b8b5063b04e72802b2cbe9d244c487c50105950d307999c6b93d38750c06cc95cc6c9fee4af87d97e4a43befa

    • SSDEEP

      24576:CBUTLTZsWkBChsDTesmoFbMWkzEvqdBahBHxPjX+//JNnAfZHMr2pePWkyw0vYeE:0kn3aTePod5kzEMahBRCHJNnws2Qr0wx

    Score
    7/10
    adwarediscoverystealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      20KB

    • MD5

      e541458cfe66ef95ffbea40eaaa07289

    • SHA1

      caec1233f841ee72004231a3027b13cdeb13274c

    • SHA256

      3bce87b66d9272c82421920c34b0216e12c57a437d1955c36f23c74c1a01d420

    • SHA512

      0bf6313e4cb7bbdcfba828fb791540b630adc58c43aa4b5ba77790367d0f34f76077cd84cc62e2a2c98c788a88547f32a11e549873d172c5aa2753124847cd0c

    • SSDEEP

      384:b1JO6XgZkjxm+NpXaWgzxUX//EUhU7ya4LQ0Ac9khYLMkIX0+GBty3Sm0:b+6Xgsm+NpKWgzxUXnEUhUua4Li70

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $TEMP/4204_adknowledgept.exe

    • Size

      1.1MB

    • MD5

      365a16d067623e31b20bed5165649473

    • SHA1

      3034fa4971efed7e56df54df482b70e7b555537c

    • SHA256

      e222a717b3c76ec83f55f88d1113f4abc6be660e809db00889d2aff404798eef

    • SHA512

      412137ca836d52ef53b7e1facd982c86f3d407ed3035c96045df99788c46a170dafe5f5b54dc3ed2751137a12451ee55d72f4ec972096c29bdae06bf2789c5f9

    • SSDEEP

      24576:pmJRe0AcpdtXLeMBYKwHcX4TuBIgSpOJB9nRpzqppn:pF0AOj6OX4T2IzpOJjXkp

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral7behavioral8

    • Target

      $1/ALOTSettings.exe

    • Size

      59KB

    • MD5

      0bfe0aca4208e104ab60ea92af24e62b

    • SHA1

      32b5ec5cdab203fe7d62f112a31961dfed8fa842

    • SHA256

      c7e16a8e57e1d045dcb66b6c575bbf0c03c93b18c2cb1bde964f6d19a3073996

    • SHA512

      516397ad121ef8a3899d346f117743a7859f73dd51cc948296391838c9f5d5c007886fd4ac3323ed7b74c695da0b62921cbb3d4eef4e1d7641e69cd9e550f66f

    • SSDEEP

      768:CwzkTf5TavrbFk7gHqrp41hTb2iVkApPkPAHbEDxn2quHXYaRojsdLXbChml37:5z+fsyrkG6kbYmT+oaRLd3Ch07

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $1/alotappbar.dll

    • Size

      1.0MB

    • MD5

      b0c2201bf2651ca7bbf5af330e03e51e

    • SHA1

      7b975e1b1424e0b0acf5623d6109a7d7093cfb07

    • SHA256

      19f4a851b8d3c5de06272550da61931811b0722a273142e7bc52ea63c8e2a038

    • SHA512

      134946d2473eb924b9610f1cd420d2186ab53b224cd3adde727df31495b3ef388eab514bfe1adff28c9d379e5e4a6a2706229e2b3e4102ac5c9b7b9a01bd5af9

    • SSDEEP

      24576:+7uUALbvsC2pGg1AVJ0Fw+7SG6x3AZkODfaynry:1Rhg1A/0FV7vNkOTaynry

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      $1/alothelper.dll

    • Size

      60KB

    • MD5

      fe07e733b538ed4de8b72460b524d65a

    • SHA1

      fad85f4f213cf057e40896dd30f7fa6a35785b82

    • SHA256

      853b2c086945f241dfc38f053f7e0ce1cc181b4f20d558e6ddc926bc1ffd67e1

    • SHA512

      7a4b4fc282cfeb9351bd33a4be05f219bc919fd8b269dcfb33eb5c5e62a6099cdb5e14c73e3403ecca597946250e74e4dec9fae152c8c10c5c1847979402a117

    • SSDEEP

      768:5O1OXL31BF4JAkbCGHC0x3agVdfFhxZTn2NED0EWp9hsvC4M2cwbZgLXbChs:58YHF42iEgPjDTEpcFMpwbZg3Chs

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      $1/alotservice.exe

    • Size

      196KB

    • MD5

      3d90c2c37ead8f51f7a4ecb5cbb24fce

    • SHA1

      ddddab02f62282f3d2d49c6ee638da2df774839b

    • SHA256

      c178d65e4f91afaccb7d8ead7288215e7a887c189c82e3a4df27d6930b648c54

    • SHA512

      d5e6a0f05c820a62cceac49c96f56e9089c335c02de3f14227b1494fc0bfade8881a25d1d462611121cc1249fc78f8c99d5810f814c82f8df843f7a4fd2387a6

    • SSDEEP

      3072:6a2Sbz2nsd7a9hFXF9qzLQfj63EGMN/r5OM4utvt3V/pFMmDn9wSqsSQy6ZSK:6alzt7aRX3qzk+3EGMNBxV/pBSgZSK

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      $1/alotwidgets.exe

    • Size

      622KB

    • MD5

      43fa2d1a49f72eb3a833175ac81cd504

    • SHA1

      a90398d5ae46e5ad775d8a0ee888fe0bdad9e34c

    • SHA256

      c82ecf6db53f5f4a0100b3a888be97653a771cbdf463d1dab1e94690a09a4c07

    • SHA512

      a32ea4de5bbba71a2c33e0bdc5d2334de3886c62268512710d792e42454d45525a282118d0c72dcd0b2e82e9de86dd09b0c0e61e93449d966dba6b855476d282

    • SSDEEP

      12288:/KWExwMIxjo2x3v59fU4VNhmDkMuF6q7nFB8Ho71v7:/05IxM2x3v44VNhmoxioBv7

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      15KB

    • MD5

      6e663f1a0de94bc05d64d020da5d6f36

    • SHA1

      c5abb0033776d6ab1f07e5b3568f7d64f90e5b04

    • SHA256

      458b70e1745dc6e768d2338ccf3e6e86436488954ca3763472d8ffec4e7177e4

    • SHA512

      2a037c39f3a08d4a80494227990f36c4fef2f73c4a6ad74dcc334317a1372234c25d08d8b80d79e126881a49fa4b3f2fffe3604c959d9ceceb47acc7192cc6a5

    • SSDEEP

      192:VsIZHdT9uwYX94kYd2iCzHR+yK7imphLAykycpKPd5mj8ozxGUWumle:VsUHd9GN2d2iwl0impATIPdAj8Ov6

    Score
    3/10
    discovery
    behavioral19behavioral20

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      b9f430f71c7144d8ff4ab94be2785aa6

    • SHA1

      c5c1e153caff7ad1d221a9acc8bbb831f05ccb05

    • SHA256

      b496e81a74ce871236abcd096fb9a6b210b456bebaa7464fa844b3241e51a655

    • SHA512

      c7ce431b6a1493fd7d1fe1b1c823ad22b582c43c8eb2fb6a471c648dd9df9953277c89932c66afd598d43ea36f4a8602e84cd175115266943071cbc8ce204099

    • SSDEEP

      192:hClej3uzvJwqJMQKN4GbeWZksMI4ETWcEbcBZ8ep2Kra7yOG:hCm2HgN4GbeWmbI4Eybogia7yO

    Score
    3/10
    discovery
    behavioral21behavioral22

    • Target

      $PLUGINSDIR/eula.html

    • Size

      14KB

    • MD5

      da5f15770b833d2e7876db980d472b17

    • SHA1

      63cf6cd7fa903646c0e86b1713a362f25b20d478

    • SHA256

      248bde8035036d6f0c3e5afc5eb247f64801111487916750bdb8e77fe287344f

    • SHA512

      d699d74ee4cf9f0a1d2e61a1d504a3604018c3c8406b513ba0e3b1d3d0e9c0095e74d0be7966c085d27cd0c118054baaf20fba591519e55c73608dae10c3d2b4

    • SSDEEP

      384:/vjekjquizlKfYzlIFsDhm2G6iG3MQWm6r/OKF:/vjDfYzab2GFGcQW1r/OKF

    Score
    3/10
    discovery
    behavioral23behavioral24

    • Target

      $PLUGINSDIR/installagent.exe

    • Size

      63KB

    • MD5

      d8cdf36aeea9574a7bd383b267abd1c9

    • SHA1

      ab5d31c5e8dfec3756ed3f0a40d587acb047b038

    • SHA256

      cbd543319fa98fd18d6367bfdfe6c207858971bfd9f24d81b8a44a46c58ecab5

    • SHA512

      d05a1c36ac37d18c444828f3fc0e933a5b121f55c441b16fea170cb99dc623af5578f22c6b7ceaeca887d717252d4f27afb6269bdb2348d9c106f64f0d84b957

    • SSDEEP

      768:CKJqRKknscJ4ZMQAViW1VAvrJd2pWhuxBZ6Lnn1pL9n29EDk40hw1ItokjGV5LX+:CKJ2KN0H1Wvtd/uHIn13Ow3kjGV53Ch

    Score
    3/10
    discovery
    behavioral25behavioral26

    • Target

      $PLUGINSDIR/installhelper.dll

    • Size

      254KB

    • MD5

      4cf4f52c1bec27e7b0f98acb291ab8e9

    • SHA1

      73b9e7e43bd79212af54c9ade8e8a813c40e6bf9

    • SHA256

      1df98f32dcea672ee2287c6b5cf5810ede6a90b1e3c9348ee36198a062711d9b

    • SHA512

      daee3a6afca82a6029e9e540e6ded992b0a1ca2903c84d1991768d447abce9c74adcb4df2f76c5d586ccc9d489a359352d362717164784dc8ba9b6b2e4e14f9c

    • SSDEEP

      6144:WahaLtE4qeCLzYem1nlFfxQ6rDeKuzgX60Nl/EtPD:3OizSnlFfxQtzlwMpD

    Score
    3/10
    discovery
    behavioral27behavioral28

    • Target

      $TEMP/4204_adknowledgept_ff.exe

    • Size

      341KB

    • MD5

      2fb1893b73994524974efa64a6d1a5d2

    • SHA1

      a997c892e71502df0ac4db6a2cecfb56dd30fab1

    • SHA256

      e820e75366e369a30b777595721e610af2985485453774c9764ab8dbc5cfb455

    • SHA512

      13c26267837942745cb0bea5e49d9090a1dcf9514f49129222340169daa6e14d759b2034ff77e1b9f914c6589590fe414ae415abf3d668371b89517fae906459

    • SSDEEP

      6144:MseRfUP4kUa7OcqDfPOEuXfKAdJy765slP36a3ZJU7Xeo3/lyFUNJvw:iRcQkngDfP3+KeJr+lP3ZJU7XeiA

    Score
    3/10
    discovery
    behavioral29behavioral30

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

adwarediscoverystealer
Score
7/10

behavioral2

adwarediscoverystealer
Score
7/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
7/10

behavioral8

discovery
Score
7/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10